Security Context Vulnerability in Siemens SCALANCE Devices

CVE-2024-30191

What is CVE-2024-30191?

A vulnerability affects multiple models in the Siemens SCALANCE product line, allowing a physically near attacker to bind an unauthorized security context with network frames meant for legitimate devices. This scenario, identified as Scenario 3 'Override client’s security context' linked to CVE-2022-47522, could enable exploitation through deceptive associations, potentially leading to unauthorized decryption of sensitive frame data. Users of SCALANCE devices are advised to review their configurations and implement appropriate security measures to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References