Vulnerability Description
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly validate the filenames of the certificate. This could allow an authenticated remote attacker to append arbitrary values which will lead to compromise of integrity of the system.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Ruggedcom Rm1224 Lte\(4G\) Eu Firmware | < 8.2 |
| Siemens | Ruggedcom Rm1224 Lte\(4G\) Eu | - |
| Siemens | Ruggedcom Rm1224 Lte\(4G\) Nam Firmware | < 8.2 |
| Siemens | Ruggedcom Rm1224 Lte\(4G\) Nam | - |
| Siemens | Scalance M804Pb Firmware | < 8.2 |
| Siemens | Scalance M804Pb | - |
| Siemens | Scalance M812-1 \(Annex A\) Firmware | < 8.2 |
| Siemens | Scalance M812-1 \(Annex A\) | - |
| Siemens | Scalance M812-1 \(Annex B\) Firmware | < 8.2 |
| Siemens | Scalance M812-1 \(Annex B\) | - |
| Siemens | Scalance M816-1 \(Annex A\) Firmware | < 8.2 |
| Siemens | Scalance M816-1 \(Annex A\) | - |
| Siemens | Scalance M816-1 \(Annex B\) Firmware | < 8.2 |
| Siemens | Scalance M816-1 \(Annex B\) | - |
| Siemens | Scalance M826-2 Firmware | < 8.2 |
| Siemens | Scalance M826-2 | - |
| Siemens | Scalance M874-2 Firmware | < 8.2 |
| Siemens | Scalance M874-2 | - |
| Siemens | Scalance M874-3 Firmware | < 8.2 |
| Siemens | Scalance M874-3 | - |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/html/ssa-354112.htmlPatchVendor Advisory
FAQ
What is CVE-2024-50559?
CVE-2024-50559 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB ...
How severe is CVE-2024-50559?
CVE-2024-50559 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-50559?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Ruggedcom Rm1224 Lte\(4G\) Eu Firmware, Siemens Ruggedcom Rm1224 Lte\(4G\) Eu, Siemens Ruggedcom Rm1224 Lte\(4G\) Nam Firmware, Siemens Ruggedcom Rm1224 Lte\(4G\) Nam, Siemens Scalance M804Pb Firmware.