SCALANCE W778-1 M12 EEC (USA) vulnerabilities
5 known vulnerabilities in SCALANCE W778-1 M12 EEC (USA) from Siemens. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.4 High severity
SCALANCE W1748-1 M12: Authentication Bypass by Spoofing
A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0), SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0), SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0), SC
- 9.1 Critical severity
RUGGEDCOM RM1224 LTE(4G) EU: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.
- 8.8 High severity
RUGGEDCOM RM1224 LTE(4G) EU: Missing Authorization
Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.
- 7.5 High severity
RUGGEDCOM RM1224 LTE(4G) EU: Allocation of Resources Without Limits or Throttling
Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.
- 7.2 High severity
RUGGEDCOM RM1224 LTE(4G) EU: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.