Input Sanitization Flaw in RUGGEDCOM and SCALANCE Devices by Siemens
CVE-2023-44373
9.1CRITICAL
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 14 November 2023
What is CVE-2023-44373?
The identified flaw in Siemens' RUGGEDCOM and SCALANCE devices involves inadequate sanitization of an input field. This vulnerability permits authenticated remote attackers with administrative access to execute arbitrary code or launch a system root shell, thereby compromising the integrity and security of the affected systems. Users are advised to update to the latest firmware versions to mitigate potential security risks associated with this vulnerability.
Affected Version(s)
RUGGEDCOM RM1224 LTE(4G) EU 0
RUGGEDCOM RM1224 LTE(4G) NAM 0
SCALANCE M804PB 0