Authorization Check Vulnerability in Siemens SCALANCE and RUGGEDCOM Products

CVE-2024-41797

What is CVE-2024-41797?

An incorrect authorization check has been discovered in multiple Siemens SCALANCE and RUGGEDCOM networking products, impacting versions prior to V3.1. This vulnerability allows authenticated remote attackers with 'guest' roles to execute internal commands not intended for their access level. This includes the ability to clear local system logs, potentially obfuscating malicious activities. Organizations using these products should review their security posture and consider applying necessary updates or mitigations to safeguard against unauthorized command execution.

References