CVE-2024-50558 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2024-50558

Analyzed

More Info Official Page

Source-productcert@siemens.com

Published At-12 Nov, 2024 | 13:15

Updated At-13 Nov, 2024 | 19:55

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices improperly manage access control for read-only users. This could allow an attacker to cause a temporary denial of service condition.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	5.3	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CPE Matches

>>ruggedcom_rm1224_lte\(4g\)_eu_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_eu_firmware:*:*:*:*:*:*:*:*

>>ruggedcom_rm1224_lte\(4g\)_eu>>-

cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_eu:-:*:*:*:*:*:*:*

>>ruggedcom_rm1224_lte\(4g\)_nam_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_nam_firmware:*:*:*:*:*:*:*:*

>>ruggedcom_rm1224_lte\(4g\)_nam>>-

cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_nam:-:*:*:*:*:*:*:*

>>scalance_m804pb_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m804pb_firmware:*:*:*:*:*:*:*:*

>>scalance_m804pb>>-

cpe:2.3:h:siemens:scalance_m804pb:-:*:*:*:*:*:*:*

>>scalance_m812-1_\(annex_a\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m812-1_\(annex_a\)_firmware:*:*:*:*:*:*:*:*

>>scalance_m812-1_\(annex_a\)>>-

cpe:2.3:h:siemens:scalance_m812-1_\(annex_a\):-:*:*:*:*:*:*:*

>>scalance_m812-1_\(annex_b\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m812-1_\(annex_b\)_firmware:*:*:*:*:*:*:*:*

>>scalance_m812-1_\(annex_b\)>>-

cpe:2.3:h:siemens:scalance_m812-1_\(annex_b\):-:*:*:*:*:*:*:*

>>scalance_m816-1_\(annex_a\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m816-1_\(annex_a\)_firmware:*:*:*:*:*:*:*:*

>>scalance_m816-1_\(annex_a\)>>-

cpe:2.3:h:siemens:scalance_m816-1_\(annex_a\):-:*:*:*:*:*:*:*

>>scalance_m816-1_\(annex_b\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m816-1_\(annex_b\)_firmware:*:*:*:*:*:*:*:*

>>scalance_m816-1_\(annex_b\)>>-

cpe:2.3:h:siemens:scalance_m816-1_\(annex_b\):-:*:*:*:*:*:*:*

>>scalance_m826-2_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m826-2_firmware:*:*:*:*:*:*:*:*

>>scalance_m826-2>>-

cpe:2.3:h:siemens:scalance_m826-2:-:*:*:*:*:*:*:*

>>scalance_m874-2_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m874-2_firmware:*:*:*:*:*:*:*:*

>>scalance_m874-2>>-

cpe:2.3:h:siemens:scalance_m874-2:-:*:*:*:*:*:*:*

>>scalance_m874-3_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m874-3_firmware:*:*:*:*:*:*:*:*

>>scalance_m874-3>>-

cpe:2.3:h:siemens:scalance_m874-3:-:*:*:*:*:*:*:*

>>scalance_m874-3_\(cn\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m874-3_\(cn\)_firmware:*:*:*:*:*:*:*:*

>>scalance_m874-3_\(cn\)>>-

cpe:2.3:h:siemens:scalance_m874-3_\(cn\):-:*:*:*:*:*:*:*

>>scalance_m876-3_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m876-3_firmware:*:*:*:*:*:*:*:*

>>scalance_m876-3>>-

cpe:2.3:h:siemens:scalance_m876-3:-:*:*:*:*:*:*:*

>>scalance_m876-3_\(rok\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m876-3_\(rok\)_firmware:*:*:*:*:*:*:*:*

>>scalance_m876-3_\(rok\)>>-

cpe:2.3:h:siemens:scalance_m876-3_\(rok\):-:*:*:*:*:*:*:*

>>scalance_m876-4_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m876-4_firmware:*:*:*:*:*:*:*:*

>>scalance_m876-4>>-

cpe:2.3:h:siemens:scalance_m876-4:-:*:*:*:*:*:*:*

>>scalance_m876-4_\(eu\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m876-4_\(eu\)_firmware:*:*:*:*:*:*:*:*

>>scalance_m876-4_\(eu\)>>-

cpe:2.3:h:siemens:scalance_m876-4_\(eu\):-:*:*:*:*:*:*:*

>>scalance_m876-4_\(nam\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_m876-4_\(nam\)_firmware:*:*:*:*:*:*:*:*

>>scalance_m876-4_\(nam\)>>-

cpe:2.3:h:siemens:scalance_m876-4_\(nam\):-:*:*:*:*:*:*:*

>>scalance_mum853-1_\(a1\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_mum853-1_\(a1\)_firmware:*:*:*:*:*:*:*:*

>>scalance_mum853-1_\(a1\)>>-

cpe:2.3:h:siemens:scalance_mum853-1_\(a1\):-:*:*:*:*:*:*:*

>>scalance_mum853-1_\(b1\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_mum853-1_\(b1\)_firmware:*:*:*:*:*:*:*:*

>>scalance_mum853-1_\(b1\)>>-

cpe:2.3:h:siemens:scalance_mum853-1_\(b1\):-:*:*:*:*:*:*:*

>>scalance_mum853-1_\(eu\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_mum853-1_\(eu\)_firmware:*:*:*:*:*:*:*:*

>>scalance_mum853-1_\(eu\)>>-

cpe:2.3:h:siemens:scalance_mum853-1_\(eu\):-:*:*:*:*:*:*:*

>>scalance_mum856-1_\(a1\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_mum856-1_\(a1\)_firmware:*:*:*:*:*:*:*:*

>>scalance_mum856-1_\(a1\)>>-

cpe:2.3:h:siemens:scalance_mum856-1_\(a1\):-:*:*:*:*:*:*:*

>>scalance_mum856-1_\(b1\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_mum856-1_\(b1\)_firmware:*:*:*:*:*:*:*:*

>>scalance_mum856-1_\(b1\)>>-

cpe:2.3:h:siemens:scalance_mum856-1_\(b1\):-:*:*:*:*:*:*:*

>>scalance_mum856-1_\(cn\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_mum856-1_\(cn\)_firmware:*:*:*:*:*:*:*:*

>>scalance_mum856-1_\(cn\)>>-

cpe:2.3:h:siemens:scalance_mum856-1_\(cn\):-:*:*:*:*:*:*:*

>>scalance_mum856-1_\(eu\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_mum856-1_\(eu\)_firmware:*:*:*:*:*:*:*:*

>>scalance_mum856-1_\(eu\)>>-

cpe:2.3:h:siemens:scalance_mum856-1_\(eu\):-:*:*:*:*:*:*:*

>>scalance_mum856-1_\(row\)_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_mum856-1_\(row\)_firmware:*:*:*:*:*:*:*:*

>>scalance_mum856-1_\(row\)>>-

cpe:2.3:h:siemens:scalance_mum856-1_\(row\):-:*:*:*:*:*:*:*

>>scalance_s615_eec_firmware>>Versions before 8.2(exclusive)

cpe:2.3:o:siemens:scalance_s615_eec_firmware:*:*:*:*:*:*:*:*

>>scalance_s615_eec>>-

cpe:2.3:h:siemens:scalance_s615_eec:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov
CWE-284	Secondary	productcert@siemens.com

References

Hyperlink	Source	Resource
https://cert-portal.siemens.com/productcert/html/ssa-354112.html	productcert@siemens.com	Patch Vendor Advisory