SCALANCE W774-1 M12 EEC vulnerabilities

6 known vulnerabilities in SCALANCE W774-1 M12 EEC from Siemens. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  SCALANCE W1748-1 M12: Authentication Bypass by Spoofing

  CVE-2024-30191Apr 9, 2024Siemens

  A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0), SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0), SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0), SC

• 9.1 Critical severity

  RUGGEDCOM RM1224 LTE(4G) EU: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2023-44373Nov 14, 2023SiemensEPSS 1.34%

  Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.

• 8.8 High severity

  RUGGEDCOM RM1224 LTE(4G) EU: Missing Authorization

  CVE-2022-31765Oct 11, 2022SiemensEPSS 1.1%

  Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.

• 7.5 High severity

  RUGGEDCOM RM1224 LTE(4G) EU: Allocation of Resources Without Limits or Throttling

  CVE-2022-36324Aug 10, 2022SiemensEPSS 1.8%

  Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

• 7.2 High severity

  RUGGEDCOM RM1224 LTE(4G) EU: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2022-36323Aug 10, 2022SiemensEPSS 1.93%

  Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

• 7.5 High severity

  OpenSSL: Loop with Unreachable Exit Condition

  CVE-2022-0778Mar 15, 2022OpenSSLEPSS 73.2%

  The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or ex