RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) and other products remote code execution vulnerability
CVE-2024-50572

8.6HIGH

Key Information:

Vendor

Siemens
Status
Ruggedcom Rm1224 Lte(4g) Eu
Ruggedcom Rm1224 Lte(4g) Nam
Scalance M804pb
Scalance M812-1 Adsl-router
Vendor
CVE Published:
12 November 2024

What is CVE-2024-50572?

A newly identified vulnerability affects several Siemens products, including the RUGGEDCOM RM1224 LTE and various SCALANCE routers. This vulnerability occurs due to improper sanitization of an input field, which may permit an authenticated remote attacker with administrative privileges to execute arbitrary code or gain access to a system root shell. Organizations utilizing vulnerable devices are advised to implement corrective measures promptly to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

RUGGEDCOM RM1224 LTE(4G) EU 0

RUGGEDCOM RM1224 LTE(4G) NAM 0

SCALANCE M804PB 0

References

https://cert-portal.siemens.com/productcert/html/ssa-3541...
https://cert-portal.siemens.com/productcert/html/ssa-7690...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.