Hidden Configuration Item Could Lead to Deployment Insights
CVE-2024-37994

7.1HIGH

Key Information:

Vendor
Siemens
Status
Simatic Reader Rf610r Cmiit
Simatic Reader Rf610r Etsi
Simatic Reader Rf610r Fcc
Simatic Reader Rf615r Cmiit
Vendor
CVE Published:
10 September 2024

Summary

A vulnerability has been detected in several SIMATIC Reader products, allowing potential attackers to exploit a hidden configuration item that enables debug functionality. This anomaly permits unauthorized access to the internal configuration settings of affected deployments. Specifically, it concerns all versions of the SIMATIC Reader RF610R, RF615R, RF650R, RF680R, RF685R, and others below the specified version thresholds. Organizations utilizing these products should take immediate action to address this security issue and protect their systems from potential exploitation.

Affected Version(s)

SIMATIC Reader RF610R CMIIT 0

SIMATIC Reader RF610R ETSI 0

SIMATIC Reader RF610R FCC 0

References

https://cert-portal.siemens.com/productcert/html/ssa-7654...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.