Incorrect Authorization Vulnerability in SCALANCE WAB and WAM Series by Siemens

CVE-2025-24532

What is CVE-2025-24532?

A vulnerability exists in various SCALANCE products where devices with the 'user' role may be compromised due to incorrect authorization in SNMPv3 View configuration. This exposes the potential for malicious actors to alter the View Type of SNMPv3 Views, which can have severe security implications for affected network infrastructures. It is crucial for users of these products to implement the necessary updates and safeguards against unauthorized modifications.

References