Vulnerability in SIMATIC Reader Products by Siemens
CVE-2024-37990

6.5MEDIUM

Key Information:

Vendor

Siemens
Status
Simatic Reader Rf610r Cmiit
Simatic Reader Rf610r Etsi
Simatic Reader Rf610r Fcc
Simatic Reader Rf615r Cmiit
Vendor
CVE Published:
10 September 2024

What is CVE-2024-37990?

A configuration file vulnerability exists in several SIMATIC Reader devices, allowing an attacker with privileged access to modify these files and potentially enable unauthorized features not meant for the device. This vulnerability affects multiple models across different geographical standards and necessitates urgent attention to secure device configurations.

Affected Version(s)

SIMATIC Reader RF610R CMIIT 0

SIMATIC Reader RF610R ETSI 0

SIMATIC Reader RF610R FCC 0

References

https://cert-portal.siemens.com/productcert/html/ssa-7654...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.