CyberSecBulletin
CVE-2023-44373NVD status: Modified

RUGGEDCOM RM1224 LTE(4G) EU: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Published Updated By the CyberSecBulletin desk

CVE-2023-44373 is a critical-severity improper neutralization of special elements in output used by a downstream component vulnerability in RUGGEDCOM RM1224 LTE(4G) EU from Siemens, with a CVSS 3.1 base score of 9.1 out of 10. It can be exploited remotely over the network by an attacker with administrator privileges, without any action from a user. The record lists version V8.0 as the first without the flaw, so updating RUGGEDCOM RM1224 LTE(4G) EU to that release or later removes the exposure. There is no confirmed exploitation so far. EPSS estimates a 1.34% chance of exploitation within 30 days, higher than 72% of scored CVEs.

Patch this week

Critical severity: a successful attack would have severe impact.

What to do

  1. Update RUGGEDCOM RM1224 LTE(4G) EU to V8.0 or a later version.
  2. Update RUGGEDCOM RM1224 LTE(4G) NAM to V8.0 or a later version.
  3. Update SCALANCE M804PB to V8.0 or a later version.
  4. Read the advisory on cert-portal.siemens.com for workarounds and exact fixed builds.

Affected products and versions

VendorProductAffected versionsFixed in
SiemensRUGGEDCOM RM1224 LTE(4G) EUbefore V8.0V8.0
SiemensRUGGEDCOM RM1224 LTE(4G) NAMbefore V8.0V8.0
SiemensSCALANCE M804PBbefore V8.0V8.0
SiemensSCALANCE M812-1 ADSL-Routerbefore V8.0V8.0
SiemensSCALANCE M816-1 ADSL-Routerbefore V8.0V8.0
SiemensSCALANCE M826-2 SHDSL-Routerbefore V8.0V8.0
SiemensSCALANCE M874-2before V8.0V8.0
SiemensSCALANCE M874-3before V8.0V8.0
SiemensSCALANCE M876-3before V8.0V8.0
SiemensSCALANCE M876-3 (ROK)before V8.0V8.0
SiemensSCALANCE M876-4before V8.0V8.0
SiemensSCALANCE M876-4 (EU)before V8.0V8.0
SiemensSCALANCE M876-4 (NAM)before V8.0V8.0
SiemensSCALANCE MUM853-1 (EU)before V8.0V8.0
SiemensSCALANCE MUM856-1 (EU)before V8.0V8.0
SiemensSCALANCE MUM856-1 (RoW)before V8.0V8.0
SiemensSCALANCE S615 EEC LAN-Routerbefore V8.0V8.0
SiemensSCALANCE S615 LAN-Routerbefore V8.0V8.0
SiemensSCALANCE W721-1 RJ45before V6.6.0V6.6.0
SiemensSCALANCE W722-1 RJ45before V6.6.0V6.6.0
SiemensSCALANCE W734-1 RJ45before V6.6.0V6.6.0
SiemensSCALANCE W734-1 RJ45 (USA)before V6.6.0V6.6.0
SiemensSCALANCE W738-1 M12before V6.6.0V6.6.0
SiemensSCALANCE W748-1 M12before V6.6.0V6.6.0
SiemensSCALANCE W748-1 RJ45before V6.6.0V6.6.0

Version data comes from the organisation that assigned the CVE; 35 further products are omitted here. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector
NetworkCan be exploited remotely over a network, including the internet.
Attack complexity
LowNo special conditions are needed; the attack works reliably.
Privileges required
HighAdministrator-level access is required first.
User interaction
NoneNo action by a victim is required.
Scope
ChangedThe attack can reach beyond the vulnerable component into other systems.
Confidentiality
HighAll data handled by the component can be read.
Integrity
HighData or code can be modified at will.
Availability
HighThe component can be taken down completely.

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. Scored by CNA (siemens.com).

Scoring systemScoreSeverityScored by
CVSS 4.09.4CriticalCNA (siemens.com)
CVSS 3.19.1CriticalCNA (siemens.com)

Official description

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

How developers prevent this class of flaw

  • Programming languages and supporting technologies might be chosen which are not subject to these issues.
  • Utilize an appropriate mix of allowlist and denylist parsing to filter control-plane syntax from all input.

More Improper Neutralization of Special Elements in Output Used by a Downstream Component vulnerabilities (CWE-74)

Timeline

  1. CVE record published.
  2. Record last changed materially (score, affected products, status or references).

References

Other vulnerabilities in RUGGEDCOM RM1224 LTE(4G) EU

All RUGGEDCOM RM1224 LTE(4G) EU vulnerabilities

Recent Improper Neutralization of Special Elements in Output Used by a Downstream Component vulnerabilities

Spotted an error? Tell us.