Siemens RUGGEDCOM RM1224 LTE(4G) EU

CVE-2022-31766

HIGH 8.6

En bref

Source: NVD
EPSS: EPSS 1.24 % · centile 69 (2026-10-31)
État: PUBLISHED
Publiée: 2022-10-11 00:00 UTC
Mise à jour: 2025-04-21 13:48 UTC
Attribuée par: siemens
Statut NVD: Analyzed

Rechercher sur…

Description

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.1.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V7.1.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V7.1.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.1.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V7.1.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V7.1.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V7.1.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V7.1.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V7.1.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V7.1.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V7.1.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V7.1.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.1.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V7.1.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V7.1.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V7.1.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V7.1.2), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions >= V1.1.0 < V3.0.0). Affected devices with TCP Event service enabled do not properly handle malformed packets. This could allow an unauthenticated remote attacker to cause a denial of service condition and reboot the device thus possibly affecting other network resources.

Faiblesses (CWE)

CWE-20 — Validation d'entrée incorrecte

Références

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	HIGH 8.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C	siemens
CVSS 3.1	HIGH 8.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	NVD · productcert@siemens.com (Secondary)
CVSS 3.1	HIGH 8.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	NVD · nvd@nist.gov (Primary)

Références européennes

ENISA EUVD · EUVD-2022-53161
GCVE · GCVE-0-2022-31766

Avis du CERT-FR

CERTFR-2022-AVI-897 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:*:*:*:*:*:*:*:* < 7.1.2
cpe:2.3:o:siemens:scalance_m804pb_firmware:*:*:*:*:*:*:*:* < 7.1.2
cpe:2.3:o:siemens:scalance_m812-1_firmware:*:*:*:*:*:*:*:* < 7.1.2
cpe:2.3:o:siemens:scalance_m816-1_firmware:*:*:*:*:*:*:*:* < 7.1.2
cpe:2.3:o:siemens:scalance_m826-2_firmware:*:*:*:*:*:*:*:* < 7.1.2
cpe:2.3:o:siemens:scalance_m874-2_firmware:*:*:*:*:*:*:*:* < 7.1.2
cpe:2.3:o:siemens:scalance_m874-3_firmware:*:*:*:*:*:*:*:* < 7.1.2
cpe:2.3:o:siemens:scalance_m876-3_firmware:*:*:*:*:*:*:*:* < 7.1.2
cpe:2.3:o:siemens:scalance_m876-4_firmware:*:*:*:*:*:*:*:* < 7.1.2
cpe:2.3:o:siemens:scalance_mum853-1_firmware:*:*:*:*:*:*:*:* < 7.1.2
cpe:2.3:o:siemens:scalance_mum856-1_firmware:*:*:*:*:*:*:*:* < 7.1.2
cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:* < 7.1.2
cpe:2.3:o:siemens:scalance_wam763-1_firmware:*:*:*:*:*:*:*:* ≥ 1.1.0
cpe:2.3:o:siemens:scalance_wam766-1_firmware:*:*:*:*:*:*:*:* ≥ 1.1.0
cpe:2.3:o:siemens:scalance_wum763-1_firmware:*:*:*:*:*:*:*:* ≥ 1.1.0
cpe:2.3:o:siemens:scalance_wum766-1_firmware:*:*:*:*:*:*:*:* ≥ 1.1.0
cpe:2.3:o:siemens:scalance_wam766-1_firmware:*:*:*:*:*:*:ecc:* ≥ 1.1.0

Produits affectés

Produit	Versions
Siemens · RUGGEDCOM RM1224 LTE(4G) EU	affected 0 < V7.1.2
Siemens · RUGGEDCOM RM1224 LTE(4G) NAM	affected 0 < V7.1.2
Siemens · SCALANCE M804PB	affected 0 < V7.1.2
Siemens · SCALANCE M812-1 ADSL-Router	affected 0 < V7.1.2
Siemens · SCALANCE M812-1 ADSL-Router	affected 0 < V7.1.2
Siemens · SCALANCE M816-1 ADSL-Router	affected 0 < V7.1.2
Siemens · SCALANCE M816-1 ADSL-Router	affected 0 < V7.1.2
Siemens · SCALANCE M826-2 SHDSL-Router	affected 0 < V7.1.2
Siemens · SCALANCE M874-2	affected 0 < V7.1.2
Siemens · SCALANCE M874-3	affected 0 < V7.1.2
Siemens · SCALANCE M876-3	affected 0 < V7.1.2
Siemens · SCALANCE M876-3 (ROK)	affected 0 < V7.1.2
Siemens · SCALANCE M876-4	affected 0 < V7.1.2
Siemens · SCALANCE M876-4 (EU)	affected 0 < V7.1.2
Siemens · SCALANCE M876-4 (NAM)	affected 0 < V7.1.2
Siemens · SCALANCE MUM853-1 (EU)	affected 0 < V7.1.2
Siemens · SCALANCE MUM856-1 (EU)	affected 0 < V7.1.2
Siemens · SCALANCE MUM856-1 (RoW)	affected 0 < V7.1.2
Siemens · SCALANCE S615 EEC LAN-Router	affected 0 < V7.1.2
Siemens · SCALANCE S615 LAN-Router	affected 0 < V7.1.2

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

⚠️ Siemens RUGGEDCOM RM1224 LTE(4G) EU