Siemens RUGGEDCOM RM1224 LTE(4G) EU

CVE-2023-44318

MEDIUM 6.9

En bref

Source: NVD
EPSS: EPSS 0.69 % · centile 53 (2026-10-31)
État: PUBLISHED
Publiée: 2023-11-14 11:03 UTC
Mise à jour: 2026-02-25 16:51 UTC
Attribuée par: siemens
Statut NVD: Modified

Rechercher sur…

Description

Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.

Faiblesses (CWE)

CWE-321 — Utilisation d'une clé cryptographique codée en dur

Références

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	MEDIUM 4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	siemens
CVSS 4.0	MEDIUM 6.9	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	siemens
CVSS 4.0	MEDIUM 6.9	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X	NVD · productcert@siemens.com (Secondary)
CVSS 3.1	MEDIUM 4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	NVD · productcert@siemens.com (Secondary)
CVSS 3.1	MEDIUM 4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	NVD · nvd@nist.gov (Primary)

Références européennes

ENISA EUVD · EUVD-2023-48672
GCVE · GCVE-0-2023-44318

Avis du CERT-FR

CERTFR-2025-AVI-0029 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
CERTFR-2024-AVI-0478 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
CERTFR-2023-AVI-1015 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
CERTFR-2023-AVI-0935 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

cpe:2.3:o:siemens:6gk5205-3bb00-2ab2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5205-3bb00-2tb2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5205-3bd00-2tb2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5205-3bd00-2ab2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5205-3bf00-2tb2_firmware:*:*:*:*:*:*:*:* ≤ 4.5
cpe:2.3:o:siemens:6gk5205-3bf00-2ab2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5208-0ba00-2tb2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5208-0ba00-2ab2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5213-3bd00-2tb2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5213-3bd00-2ab2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5213-3bb00-2tb2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5213-3bb00-2ab2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5213-3bf00-2tb2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5213-3bf00-2ab2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5216-0ba00-2tb2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5216-0ba00-2ab2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5206-2bd00-2ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5206-2bb00-2ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5206-2rs00-2ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5206-2rs00-5ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5206-2rs00-5fc2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5206-2bs00-2ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5206-2bs00-2fc2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5206-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5206-2gs00-2tc2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5206-2gs00-2fc2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5208-0ba00-2ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5208-0ba00-2fc2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5208-0ga00-2ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5208-0ga00-2tc2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5208-0ga00-2fc2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5208-0ra00-2ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5208-0ra00-5ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5216-0ba00-2ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5216-3rs00-2ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5216-3rs00-5ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5216-4bs00-2ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5216-4gs00-2ac2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5216-4gs00-2tc2_firmware:*:*:*:*:*:*:*:* < 4.5
cpe:2.3:o:siemens:6gk5216-4gs00-2fc2_firmware:*:*:*:*:*:*:*:* < 4.5
+31 autres

Produits affectés

Produit	Versions
Siemens · RUGGEDCOM RM1224 LTE(4G) EU	affected 0 < *
Siemens · RUGGEDCOM RM1224 LTE(4G) NAM	affected 0 < *
Siemens · SCALANCE M804PB	affected 0 < *
Siemens · SCALANCE M812-1 ADSL-Router	affected 0 < *
Siemens · SCALANCE M812-1 ADSL-Router	affected 0 < *
Siemens · SCALANCE M816-1 ADSL-Router	affected 0 < *
Siemens · SCALANCE M816-1 ADSL-Router	affected 0 < *
Siemens · SCALANCE M826-2 SHDSL-Router	affected 0 < *
Siemens · SCALANCE M874-2	affected 0 < *
Siemens · SCALANCE M874-3	affected 0 < *
Siemens · SCALANCE M876-3	affected 0 < *
Siemens · SCALANCE M876-3 (ROK)	affected 0 < *
Siemens · SCALANCE M876-4	affected 0 < *
Siemens · SCALANCE M876-4 (EU)	affected 0 < *
Siemens · SCALANCE M876-4 (NAM)	affected 0 < *
Siemens · SCALANCE MUM853-1 (EU)	affected 0 < *
Siemens · SCALANCE MUM856-1 (EU)	affected 0 < *
Siemens · SCALANCE MUM856-1 (RoW)	affected 0 < *
Siemens · SCALANCE S615 EEC LAN-Router	affected 0 < *
Siemens · SCALANCE S615 LAN-Router	affected 0 < *

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

🟡 Siemens RUGGEDCOM RM1224 LTE(4G) EU