SCALANCE M874-3 VPN Router Vulnerability

CVE-2024-41976

Summary

A notable security vulnerability affects several RUGGEDCOM and SCALANCE devices due to improper validation of input in specific VPN configuration fields. This security flaw allows an authenticated remote attacker to potentially execute arbitrary code on the affected devices, posing serious risk to network integrity and device functionality. Users of the RUGGEDCOM RM1224 LTE and SCALANCE product lines, particularly those operating on firmware version earlier than V8.1, should take immediate action to secure their systems against potential exploitation. Remedial updates and best practices for network security are recommended to mitigate any associated threats.

References