Description (CNA)
Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / RUGGEDCOM RM1224 LTE(4G) EU | affected 0 before V7.1.2 |
| Siemens / RUGGEDCOM RM1224 LTE(4G) NAM | affected 0 before V7.1.2 |
| Siemens / SCALANCE M804PB | affected 0 before V7.1.2 |
| Siemens / SCALANCE M812-1 ADSL-Router | affected 0 before V7.1.2 |
| Siemens / SCALANCE M812-1 ADSL-Router | affected 0 before V7.1.2 |
| Siemens / SCALANCE M816-1 ADSL-Router | affected 0 before V7.1.2 |
| Siemens / SCALANCE M816-1 ADSL-Router | affected 0 before V7.1.2 |
| Siemens / SCALANCE M826-2 SHDSL-Router | affected 0 before V7.1.2 |
| Siemens / SCALANCE M874-2 | affected 0 before V7.1.2 |
| Siemens / SCALANCE M874-3 | affected 0 before V7.1.2 |
| Siemens / SCALANCE M876-3 | affected 0 before V7.1.2 |
| Siemens / SCALANCE M876-3 (ROK) | affected 0 before V7.1.2 |
| Siemens / SCALANCE M876-4 | affected 0 before V7.1.2 |
| Siemens / SCALANCE M876-4 (EU) | affected 0 before V7.1.2 |
| Siemens / SCALANCE M876-4 (NAM) | affected 0 before V7.1.2 |
| Siemens / SCALANCE MUM853-1 (EU) | affected 0 before V7.1.2 |
| Siemens / SCALANCE MUM856-1 (EU) | affected 0 before V7.1.2 |
| Siemens / SCALANCE MUM856-1 (RoW) | affected 0 before V7.1.2 |
| Siemens / SCALANCE S615 EEC LAN-Router | affected 0 before V7.1.2 |
| Siemens / SCALANCE S615 LAN-Router | affected 0 before V7.1.2 |
| Siemens / SCALANCE SC622-2C | affected All versions < V3.0 |
| Siemens / SCALANCE SC632-2C | affected All versions < V3.0 |
| Siemens / SCALANCE SC636-2C | affected All versions < V3.0 |
| Siemens / SCALANCE SC642-2C | affected All versions < V3.0 |
| Siemens / SCALANCE SC646-2C | affected All versions < V3.0 |
| Siemens / SCALANCE W1748-1 M12 | affected 0 before * |
| Siemens / SCALANCE W1748-1 M12 | affected 0 before * |
| Siemens / SCALANCE W1788-1 M12 | affected 0 before * |
| Siemens / SCALANCE W1788-2 EEC M12 | affected 0 before * |
| Siemens / SCALANCE W1788-2 M12 | affected 0 before * |
| Siemens / SCALANCE W1788-2IA M12 | affected 0 before * |
| Siemens / SCALANCE W721-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W721-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W721-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W721-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W722-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W722-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W722-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W722-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W722-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W722-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W734-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W734-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W734-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W734-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W734-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W734-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W734-1 RJ45 (USA) | affected 0 before V6.6.0 |
| Siemens / SCALANCE W734-1 RJ45 (USA) | affected 0 before V6.6.0 |
| Siemens / SCALANCE W738-1 M12 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W738-1 M12 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W738-1 M12 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W738-1 M12 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W748-1 M12 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W748-1 M12 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W748-1 M12 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W748-1 M12 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W748-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W748-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W748-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W748-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W761-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W761-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W761-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W761-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 M12 EEC | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 M12 EEC | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 M12 EEC | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 M12 EEC | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 RJ45 (USA) | affected 0 before V6.6.0 |
| Siemens / SCALANCE W774-1 RJ45 (USA) | affected 0 before V6.6.0 |
| Siemens / SCALANCE W778-1 M12 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W778-1 M12 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W778-1 M12 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W778-1 M12 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W778-1 M12 EEC | affected 0 before V6.6.0 |
| Siemens / SCALANCE W778-1 M12 EEC | affected 0 before V6.6.0 |
| Siemens / SCALANCE W778-1 M12 EEC (USA) | affected 0 before V6.6.0 |
| Siemens / SCALANCE W778-1 M12 EEC (USA) | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-1 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-2 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-2 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-2 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-2 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-2 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-2 RJ45 | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-2 SFP | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-2 SFP | affected 0 before V6.6.0 |
| Siemens / SCALANCE W786-2 SFP | affected 0 before V6.6.0 |
CWE
CWE-862
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-552702.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-552702.html
- https://cert-portal.siemens.com/productcert/html/ssa-019200.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.