Code Execution Vulnerability in RUGGEDCOM and SCALANCE Products
CVE-2023-44317
7.2HIGH
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 14 November 2023
What is CVE-2023-44317?
This vulnerability affects a range of Siemens RUGGEDCOM and SCALANCE products due to improper validation of uploaded X509 certificates. Attackers who possess administrative privileges might exploit this flaw, allowing them to execute arbitrary code on the targeted devices. With various products identified, users are urged to review their system versions and apply necessary updates to mitigate potential risks associated with this vulnerability.
Affected Version(s)
RUGGEDCOM RM1224 LTE(4G) EU 0
RUGGEDCOM RM1224 LTE(4G) NAM 0
SCALANCE M804PB 0