Description (CNA)
Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / RUGGEDCOM RM1224 LTE(4G) EU | affected 0 before V7.2 |
| Siemens / RUGGEDCOM RM1224 LTE(4G) NAM | affected 0 before V7.2 |
| Siemens / SCALANCE M804PB | affected 0 before V7.2 |
| Siemens / SCALANCE M812-1 ADSL-Router | affected 0 before V7.2 |
| Siemens / SCALANCE M812-1 ADSL-Router | affected 0 before V7.2 |
| Siemens / SCALANCE M816-1 ADSL-Router | affected 0 before V7.2 |
| Siemens / SCALANCE M816-1 ADSL-Router | affected 0 before V7.2 |
| Siemens / SCALANCE M826-2 SHDSL-Router | affected 0 before V7.2 |
| Siemens / SCALANCE M874-2 | affected 0 before V7.2 |
| Siemens / SCALANCE M874-3 | affected 0 before V7.2 |
| Siemens / SCALANCE M876-3 | affected 0 before V7.2 |
| Siemens / SCALANCE M876-3 (ROK) | affected 0 before V7.2 |
| Siemens / SCALANCE M876-4 | affected 0 before V7.2 |
| Siemens / SCALANCE M876-4 (EU) | affected 0 before V7.2 |
| Siemens / SCALANCE M876-4 (NAM) | affected 0 before V7.2 |
| Siemens / SCALANCE MUM853-1 (EU) | affected 0 before V7.2 |
| Siemens / SCALANCE MUM856-1 (EU) | affected 0 before V7.2 |
| Siemens / SCALANCE MUM856-1 (RoW) | affected 0 before V7.2 |
| Siemens / SCALANCE S615 EEC LAN-Router | affected 0 before V7.2 |
| Siemens / SCALANCE S615 LAN-Router | affected 0 before V7.2 |
| Siemens / SCALANCE SC622-2C | affected 0 before V2.3 |
| Siemens / SCALANCE SC626-2C | affected 0 before V2.3 |
| Siemens / SCALANCE SC632-2C | affected 0 before V2.3 |
| Siemens / SCALANCE SC636-2C | affected 0 before V2.3 |
| Siemens / SCALANCE SC642-2C | affected 0 before V2.3 |
| Siemens / SCALANCE SC646-2C | affected 0 before V2.3 |
| Siemens / SCALANCE W1748-1 M12 | affected 0 before * |
| Siemens / SCALANCE W1748-1 M12 | affected 0 before * |
| Siemens / SCALANCE W1788-1 M12 | affected 0 before * |
| Siemens / SCALANCE W1788-2 EEC M12 | affected 0 before * |
| Siemens / SCALANCE W1788-2 M12 | affected 0 before * |
| Siemens / SCALANCE W1788-2IA M12 | affected 0 before * |
| Siemens / SCALANCE W721-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W721-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W722-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W722-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W722-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W734-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W734-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W734-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W734-1 RJ45 (USA) | affected 0 before * |
| Siemens / SCALANCE W738-1 M12 | affected 0 before * |
| Siemens / SCALANCE W738-1 M12 | affected 0 before * |
| Siemens / SCALANCE W748-1 M12 | affected 0 before * |
| Siemens / SCALANCE W748-1 M12 | affected 0 before * |
| Siemens / SCALANCE W748-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W748-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W761-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W761-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W774-1 M12 EEC | affected 0 before * |
| Siemens / SCALANCE W774-1 M12 EEC | affected 0 before * |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W774-1 RJ45 (USA) | affected 0 before * |
| Siemens / SCALANCE W778-1 M12 | affected 0 before * |
| Siemens / SCALANCE W778-1 M12 | affected 0 before * |
| Siemens / SCALANCE W778-1 M12 EEC | affected 0 before * |
| Siemens / SCALANCE W778-1 M12 EEC (USA) | affected 0 before * |
| Siemens / SCALANCE W786-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W786-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W786-2 RJ45 | affected 0 before * |
| Siemens / SCALANCE W786-2 RJ45 | affected 0 before * |
| Siemens / SCALANCE W786-2 RJ45 | affected 0 before * |
| Siemens / SCALANCE W786-2 SFP | affected 0 before * |
| Siemens / SCALANCE W786-2 SFP | affected 0 before * |
| Siemens / SCALANCE W786-2IA RJ45 | affected 0 before * |
| Siemens / SCALANCE W786-2IA RJ45 | affected 0 before * |
| Siemens / SCALANCE W788-1 M12 | affected 0 before * |
| Siemens / SCALANCE W788-1 M12 | affected 0 before * |
| Siemens / SCALANCE W788-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W788-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W788-2 M12 | affected 0 before * |
| Siemens / SCALANCE W788-2 M12 | affected 0 before * |
| Siemens / SCALANCE W788-2 M12 EEC | affected 0 before * |
| Siemens / SCALANCE W788-2 M12 EEC | affected 0 before * |
| Siemens / SCALANCE W788-2 M12 EEC | affected 0 before * |
| Siemens / SCALANCE W788-2 RJ45 | affected 0 before * |
| Siemens / SCALANCE W788-2 RJ45 | affected 0 before * |
| Siemens / SCALANCE W788-2 RJ45 | affected 0 before * |
| Siemens / SCALANCE WAM763-1 | affected 0 before V2.0.0 |
| Siemens / SCALANCE WAM766-1 | affected 0 before V2.0.0 |
| Siemens / SCALANCE WAM766-1 (US) | affected 0 before V2.0.0 |
| Siemens / SCALANCE WAM766-1 EEC | affected 0 before V2.0.0 |
| Siemens / SCALANCE WAM766-1 EEC (US) | affected 0 before V2.0.0 |
| Siemens / SCALANCE WUM763-1 | affected 0 before V2.0.0 |
| Siemens / SCALANCE WUM763-1 | affected 0 before V2.0.0 |
| Siemens / SCALANCE WUM766-1 | affected 0 before V2.0.0 |
| Siemens / SCALANCE WUM766-1 (USA) | affected 0 before V2.0.0 |
| Siemens / SCALANCE XB205-3 (SC, PN) | affected 0 before V4.4 |
| Siemens / SCALANCE XB205-3 (ST, E/IP) | affected 0 before V4.4 |
| Siemens / SCALANCE XB205-3 (ST, E/IP) | affected 0 before V4.4 |
| Siemens / SCALANCE XB205-3 (ST, PN) | affected 0 before V4.4 |
| Siemens / SCALANCE XB205-3LD (SC, E/IP) | affected 0 before V4.4 |
| Siemens / SCALANCE XB205-3LD (SC, PN) | affected 0 before V4.4 |
| Siemens / SCALANCE XB208 (E/IP) | affected 0 before V4.4 |
| Siemens / SCALANCE XB208 (PN) | affected 0 before V4.4 |
| Siemens / SCALANCE XB213-3 (SC, E/IP) | affected 0 before V4.4 |
| Siemens / SCALANCE XB213-3 (SC, PN) | affected 0 before V4.4 |
CWE
CWE-327
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-413565.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.