Description (CNA)
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / RUGGEDCOM RM1224 LTE(4G) EU | affected 0 before * |
| Siemens / RUGGEDCOM RM1224 LTE(4G) NAM | affected 0 before * |
| Siemens / SCALANCE M804PB | affected 0 before * |
| Siemens / SCALANCE M812-1 ADSL-Router | affected 0 before * |
| Siemens / SCALANCE M812-1 ADSL-Router | affected 0 before * |
| Siemens / SCALANCE M816-1 ADSL-Router | affected 0 before * |
| Siemens / SCALANCE M816-1 ADSL-Router | affected 0 before * |
| Siemens / SCALANCE M826-2 SHDSL-Router | affected 0 before * |
| Siemens / SCALANCE M874-2 | affected 0 before * |
| Siemens / SCALANCE M874-3 | affected 0 before * |
| Siemens / SCALANCE M876-3 | affected 0 before * |
| Siemens / SCALANCE M876-3 (ROK) | affected 0 before * |
| Siemens / SCALANCE M876-4 | affected 0 before * |
| Siemens / SCALANCE M876-4 (EU) | affected 0 before * |
| Siemens / SCALANCE M876-4 (NAM) | affected 0 before * |
| Siemens / SCALANCE MUM853-1 (EU) | affected 0 before * |
| Siemens / SCALANCE MUM856-1 (EU) | affected 0 before * |
| Siemens / SCALANCE MUM856-1 (RoW) | affected 0 before * |
| Siemens / SCALANCE S615 EEC LAN-Router | affected 0 before * |
| Siemens / SCALANCE S615 LAN-Router | affected 0 before * |
| Siemens / SCALANCE XB205-3 (SC, PN) | affected 0 before * |
| Siemens / SCALANCE XB205-3 (ST, E/IP) | affected 0 before * |
| Siemens / SCALANCE XB205-3 (ST, E/IP) | affected 0 before * |
| Siemens / SCALANCE XB205-3 (ST, PN) | affected 0 before * |
| Siemens / SCALANCE XB205-3LD (SC, E/IP) | affected 0 before * |
| Siemens / SCALANCE XB205-3LD (SC, PN) | affected 0 before * |
| Siemens / SCALANCE XB206-2 (SC) | affected 0 before * |
| Siemens / SCALANCE XB206-2 (ST/BFOC) | affected 0 before * |
| Siemens / SCALANCE XB206-2 LD | affected 0 before * |
| Siemens / SCALANCE XB206-2 SC | affected 0 before * |
| Siemens / SCALANCE XB206-2 ST | affected 0 before * |
| Siemens / SCALANCE XB206-2LD | affected 0 before * |
| Siemens / SCALANCE XB208 (E/IP) | affected 0 before * |
| Siemens / SCALANCE XB208 (PN) | affected 0 before * |
| Siemens / SCALANCE XB213-3 (SC, E/IP) | affected 0 before * |
| Siemens / SCALANCE XB213-3 (SC, PN) | affected 0 before * |
| Siemens / SCALANCE XB213-3 (ST, E/IP) | affected 0 before * |
| Siemens / SCALANCE XB213-3 (ST, PN) | affected 0 before * |
| Siemens / SCALANCE XB213-3LD (SC, E/IP) | affected 0 before * |
| Siemens / SCALANCE XB213-3LD (SC, PN) | affected 0 before * |
| Siemens / SCALANCE XB216 (E/IP) | affected 0 before * |
| Siemens / SCALANCE XB216 (PN) | affected 0 before * |
| Siemens / SCALANCE XC206-2 (SC) | affected 0 before * |
| Siemens / SCALANCE XC206-2 (ST/BFOC) | affected 0 before * |
| Siemens / SCALANCE XC206-2G PoE | affected 0 before * |
| Siemens / SCALANCE XC206-2G PoE (54 V DC) | affected 0 before * |
| Siemens / SCALANCE XC206-2G PoE EEC (54 V DC) | affected 0 before * |
| Siemens / SCALANCE XC206-2SFP | affected 0 before * |
| Siemens / SCALANCE XC206-2SFP EEC | affected 0 before * |
| Siemens / SCALANCE XC206-2SFP G | affected 0 before * |
| Siemens / SCALANCE XC206-2SFP G (EIP DEF.) | affected 0 before * |
| Siemens / SCALANCE XC206-2SFP G EEC | affected 0 before * |
| Siemens / SCALANCE XC208 | affected 0 before * |
| Siemens / SCALANCE XC208EEC | affected 0 before * |
| Siemens / SCALANCE XC208G | affected 0 before * |
| Siemens / SCALANCE XC208G (EIP def.) | affected 0 before * |
| Siemens / SCALANCE XC208G EEC | affected 0 before * |
| Siemens / SCALANCE XC208G PoE | affected 0 before * |
| Siemens / SCALANCE XC208G PoE (54 V DC) | affected 0 before * |
| Siemens / SCALANCE XC216 | affected 0 before * |
| Siemens / SCALANCE XC216-3G PoE | affected 0 before * |
| Siemens / SCALANCE XC216-3G PoE (54 V DC) | affected 0 before * |
| Siemens / SCALANCE XC216-4C | affected 0 before * |
| Siemens / SCALANCE XC216-4C G | affected 0 before * |
| Siemens / SCALANCE XC216-4C G (EIP Def.) | affected 0 before * |
| Siemens / SCALANCE XC216-4C G EEC | affected 0 before * |
| Siemens / SCALANCE XC216EEC | affected 0 before * |
| Siemens / SCALANCE XC224 | affected 0 before * |
| Siemens / SCALANCE XC224-4C G | affected 0 before * |
| Siemens / SCALANCE XC224-4C G (EIP Def.) | affected 0 before * |
| Siemens / SCALANCE XC224-4C G EEC | affected 0 before * |
| Siemens / SCALANCE XF204 | affected 0 before * |
| Siemens / SCALANCE XF204 DNA | affected 0 before * |
| Siemens / SCALANCE XF204-2BA | affected 0 before * |
| Siemens / SCALANCE XF204-2BA DNA | affected 0 before * |
| Siemens / SCALANCE XF204G | affected 0 before * |
| Siemens / SCALANCE XP208 | affected 0 before * |
| Siemens / SCALANCE XP208 | affected 0 before * |
| Siemens / SCALANCE XP208 (Ethernet/IP) | affected 0 before * |
| Siemens / SCALANCE XP208EEC | affected 0 before * |
| Siemens / SCALANCE XP208EEC | affected 0 before * |
| Siemens / SCALANCE XP208G | affected 0 before * |
| Siemens / SCALANCE XP208G EEC | affected 0 before * |
| Siemens / SCALANCE XP208G PoE EEC | affected 0 before * |
| Siemens / SCALANCE XP208G PP | affected 0 before * |
| Siemens / SCALANCE XP208PoE EEC | affected 0 before * |
| Siemens / SCALANCE XP208PoE EEC | affected 0 before * |
| Siemens / SCALANCE XP216 | affected 0 before * |
| Siemens / SCALANCE XP216 (Ethernet/IP) | affected 0 before * |
| Siemens / SCALANCE XP216 (V2) | affected 0 before * |
| Siemens / SCALANCE XP216EEC | affected 0 before * |
| Siemens / SCALANCE XP216EEC (V2) | affected 0 before * |
| Siemens / SCALANCE XP216G | affected 0 before * |
| Siemens / SCALANCE XP216G EEC | affected 0 before * |
| Siemens / SCALANCE XP216G PoE EEC | affected 0 before * |
| Siemens / SCALANCE XP216POE EEC | affected 0 before * |
| Siemens / SCALANCE XP216PoE EEC (V2) | affected 0 before * |
| Siemens / SCALANCE XR324WG (24 x FE, AC 230V) | affected 0 before * |
| Siemens / SCALANCE XR324WG (24 X FE, DC 24V) | affected 0 before * |
| Siemens / SCALANCE XR326-2C PoE WG | affected 0 before * |
CWE
CWE-321
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-180704.html
- https://cert-portal.siemens.com/productcert/html/ssa-353002.html
- https://cert-portal.siemens.com/productcert/html/ssa-690517.html
ADP enrichment
No English description supplied.
- https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-180704.html
- https://cert-portal.siemens.com/productcert/html/ssa-353002.html
- https://cert-portal.siemens.com/productcert/html/ssa-690517.html
No English description supplied.
No references supplied.