CVE-2024-41797
mediumpriority · track · 0EPSS 0.004 · 32 %ileDEEUNLRUUSEPSS · scored 2026-10-27
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 (6GK5328-4TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2) (All versions < V3.1), SCALANCE XC332 (6GK5332-0GA00-2AC2) (All versions < V3.1), SCALANCE XC416-8 (6GK5424-8TR00-2AC2) (All versions < V3.1), SCALANCE XC424-4 (6GK5428-4TR00-2AC2) (All versions < V3.1), SCALANCE XC432 (6GK5432-0GR00-2AC2) (All versions < V3.1), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.1), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.1), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.1), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-2AR3) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-3AR3) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-4AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-2AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-3AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-4AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-2AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-3AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-4AR3) (All versions < V3.1), SCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-2AR3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-3AR3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-4AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-2AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-3AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-4AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-2AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-3AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-4AR3) (All versions < V3.1), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.1), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.1), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.1), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.1). Affected devices contain an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with "guest" role to invoke an internal "do system" command which exceeds their privileges. This command allows the execution of certain low-risk actions, the most critical of which is clearing the local system log.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedRUGGEDCOM RST2428P (6GK6242-6PA00)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC316-8 (6GK5324-8TS00-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC324-4 (6GK5328-4TS00-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC332 (6GK5332-0GA00-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC416-8 (6GK5424-8TR00-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC424-4 (6GK5428-4TR00-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC432 (6GK5432-0GR00-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCH328 (6GK5328-4TS01-2EC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCM324 (6GK5324-8TS01-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCM328 (6GK5328-4TS01-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCM332 (6GK5332-0GA01-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR302-32 (6GK5334-5TS00-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR302-32 (6GK5334-5TS00-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR302-32 (6GK5334-5TS00-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR322-12 (6GK5334-3TS00-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR322-12 (6GK5334-3TS00-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR322-12 (6GK5334-3TS00-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR326-8 (6GK5334-2TS00-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR326-8 (6GK5334-2TS00-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR326-8 (6GK5334-2TS00-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR502-32 (6GK5534-5TR00-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR502-32 (6GK5534-5TR00-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR502-32 (6GK5534-5TR00-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR522-12 (6GK5534-3TR00-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR522-12 (6GK5534-3TR00-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR522-12 (6GK5534-3TR00-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR526-8 (6GK5534-2TR00-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR526-8 (6GK5534-2TR00-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR526-8 (6GK5534-2TR00-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedRUGGEDCOM RST2428P (6GK6242-6PA00)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC316-8 (6GK5324-8TS00-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC324-4 (6GK5328-4TS00-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC332 (6GK5332-0GA00-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC416-8 (6GK5424-8TR00-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC424-4 (6GK5428-4TR00-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC432 (6GK5432-0GR00-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCH328 (6GK5328-4TS01-2EC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCM324 (6GK5324-8TS01-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCM328 (6GK5328-4TS01-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCM332 (6GK5332-0GA01-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR302-32 (6GK5334-5TS00-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR302-32 (6GK5334-5TS00-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR302-32 (6GK5334-5TS00-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR322-12 (6GK5334-3TS00-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR322-12 (6GK5334-3TS00-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR322-12 (6GK5334-3TS00-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR326-8 (6GK5334-2TS00-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR326-8 (6GK5334-2TS00-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR326-8 (6GK5334-2TS00-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR502-32 (6GK5534-5TR00-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR502-32 (6GK5534-5TR00-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR502-32 (6GK5534-5TR00-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR522-12 (6GK5534-3TR00-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR522-12 (6GK5534-3TR00-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR522-12 (6GK5534-3TR00-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR526-8 (6GK5534-2TR00-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR526-8 (6GK5534-2TR00-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR526-8 (6GK5534-2TR00-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 1.3–5.3
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (292)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- NCSC-2025-0187Kwetsbaarheden verholpen in Siemens productenNL2025-06-10csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als RUGGEDCOM, SCALANCE, SIMATIC en Tecnomatix
- SSA-633269SSA-633269: Incorrect Authorization Check Vulnerability in Industrial Communication Devices based on SINEC OS before V3.12025-06-10csaf · siemens_psirtDE
Several Industrial Communication Devices based on SINEC OS before V3.1 contain an incorrect authorization check vulnerability that could allow an attacker to perform actions that exceed the permissions of the "guest" role. Siemens has released new versions for the affected products and recommends to update to the latest versions.
- ICSA-25-162-03Siemens SCALANCE and RUGGEDCOM2025-06-10icsa · cisa_csaf_otUS
Several Industrial Communication Devices based on SINEC OS before V3.1 contain an incorrect authorization check vulnerability that could allow an attacker to perform actions that exceed the permissions of the "guest" role. Siemens has released new versions for the affected products and recommends to update to the latest versions.
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (5)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2024-41797cnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-633269.htmlcnnvd
- https://support.industry.siemens.com/cs/document/109977557/firmware-update-for-sinec-os-firmware-version-3-1?lc=en-wwPatchcnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-633269.htmlenisa_euvd
- https://cert-portal.siemens.com/productcert/html/ssa-633269.htmlnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan