1. Home
  2. CVE Database
  3. CVE-2024-47903
MEDIUM · 5.8

CVE-2024-47903

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which ...

Vulnerability Description

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices allows to write arbitrary files to the web server's DocumentRoot directory.

CVSS Score

5.8

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
SiemensIntermesh 7177 Hybrid 2.0 Subscriber< 8.2.12
SiemensIntermesh 7707 Fire Subscriber Firmware< 7.2.12
SiemensIntermesh 7707 Fire Subscriber-

Related Weaknesses (CWE)

CWE-250

References

FAQ

What is CVE-2024-47903?

CVE-2024-47903 is a vulnerability with a CVSS score of 5.8 (MEDIUM). A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which ...

How severe is CVE-2024-47903?

CVE-2024-47903 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-47903?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens Intermesh 7177 Hybrid 2.0 Subscriber, Siemens Intermesh 7707 Fire Subscriber Firmware, Siemens Intermesh 7707 Fire Subscriber.