Authorization Check Vulnerability in Siemens SCALANCE and RUGGEDCOM Products

CVE-2024-41797

What is CVE-2024-41797?

An incorrect authorization check has been discovered in multiple Siemens SCALANCE and RUGGEDCOM networking products, impacting versions prior to V3.1. This vulnerability allows authenticated remote attackers with 'guest' roles to execute internal commands not intended for their access level. This includes the ability to clear local system logs, potentially obfuscating malicious activities. Organizations using these products should review their security posture and consider applying necessary updates or mitigations to safeguard against unauthorized command execution.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References