CVE-2024-41978 - OpenCVE

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.1). Affected devices insert sensitive information about the generation of 2FA tokens into log files. This could allow an authenticated remote attacker to forge 2FA tokens of other users.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Siemens	Ruggedcom Rm1224 Lte\(4g\) Eu Ruggedcom Rm1224 Lte\(4g\) Eu Firmware Ruggedcom Rm1224 Lte\(4g\) Nam Ruggedcom Rm1224 Lte\(4g\) Nam Firmware Scalance M804pb Scalance M804pb Firmware Scalance M812-1 \(annex A\) Scalance M812-1 \(annex A\) Firmware Scalance M812-1 \(annex B\) Scalance M812-1 \(annex B\) Firmware Scalance M816-1 \(annex A\) Scalance M816-1 \(annex A\) Firmware Scalance M816-1 \(annex B\) Scalance M816-1 \(annex B\) Firmware Scalance M826-2 Shdsl-router Scalance M826-2 Shdsl-router Firmware Scalance M874-2 Scalance M874-2 Firmware Scalance M874-3 Scalance M874-3 3g-router \(cn\) Scalance M874-3 3g-router \(cn\) Firmware Scalance M874-3 Firmware Scalance M876-3 Scalance M876-3 \(rok\) Scalance M876-3 \(rok\) Firmware Scalance M876-3 Firmware Scalance M876-4 Scalance M876-4 \(eu\) Scalance M876-4 \(eu\) Firmware Scalance M876-4 \(nam\) Scalance M876-4 \(nam\) Firmware Scalance M876-4 Firmware Scalance Mum853-1 \(a1\) Scalance Mum853-1 \(a1\) Firmware Scalance Mum853-1 \(b1\) Scalance Mum853-1 \(b1\) Firmware Scalance Mum853-1 \(eu\) Scalance Mum853-1 \(eu\) Firmware Scalance Mum856-1 \(a1\) Scalance Mum856-1 \(a1\) Firmware Scalance Mum856-1 \(b1\) Scalance Mum856-1 \(b1\) Firmware Scalance Mum856-1 \(cn\) Scalance Mum856-1 \(cn\) Firmware Scalance Mum856-1 \(eu\) Scalance Mum856-1 \(eu\) Firmware Scalance Mum856-1 \(row\) Scalance Mum856-1 \(row\) Firmware Scalance S615 Eec Lan-router Scalance S615 Eec Lan-router Firmware Scalance S615 Lan-router Scalance S615 Lan-router Firmware

Configuration 1 [-]

AND

cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_eu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_eu:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_nam_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_nam:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:siemens:scalance_m804pb_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m804pb:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:siemens:scalance_m826-2_shdsl-router_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m826-2_shdsl-router:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:siemens:scalance_m874-2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m874-2:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:siemens:scalance_m874-3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m874-3:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:siemens:scalance_m876-3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m876-3:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:siemens:scalance_m876-4_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m876-4:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:siemens:scalance_m874-3_3g-router_\(cn\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m874-3_3g-router_\(cn\):-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:siemens:scalance_m876-3_\(rok\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m876-3_\(rok\):-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:siemens:scalance_m876-4_\(eu\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m876-4_\(eu\):-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:siemens:scalance_m876-4_\(nam\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m876-4_\(nam\):-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:siemens:scalance_mum853-1_\(a1\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_mum853-1_\(a1\):-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:siemens:scalance_mum853-1_\(b1\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_mum853-1_\(b1\):-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:siemens:scalance_mum853-1_\(eu\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_mum853-1_\(eu\):-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:siemens:scalance_mum856-1_\(a1\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_mum856-1_\(a1\):-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:siemens:scalance_mum856-1_\(b1\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_mum856-1_\(b1\):-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:siemens:scalance_mum856-1_\(cn\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_mum856-1_\(cn\):-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:siemens:scalance_mum856-1_\(eu\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_mum856-1_\(eu\):-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:siemens:scalance_mum856-1_\(row\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_mum856-1_\(row\):-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:siemens:scalance_s615_eec_lan-router_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_s615_eec_lan-router:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:siemens:scalance_s615_lan-router_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_s615_lan-router:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:siemens:scalance_m812-1_\(annex_a\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m812-1_\(annex_a\):-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:siemens:scalance_m812-1_\(annex_b\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m812-1_\(annex_b\):-:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:siemens:scalance_m816-1_\(annex_a\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m816-1_\(annex_a\):-:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:siemens:scalance_m816-1_\(annex_b\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m816-1_\(annex_b\):-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://cert-portal.siemens.com/productcert/html/ssa-087301.html

History

Fri, 23 Aug 2024 19:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Siemens Siemens ruggedcom Rm1224 Lte\(4g\) Eu Siemens ruggedcom Rm1224 Lte\(4g\) Eu Firmware Siemens ruggedcom Rm1224 Lte\(4g\) Nam Siemens ruggedcom Rm1224 Lte\(4g\) Nam Firmware Siemens scalance M804pb Siemens scalance M804pb Firmware Siemens scalance M812-1 \(annex A\) Siemens scalance M812-1 \(annex A\) Firmware Siemens scalance M812-1 \(annex B\) Siemens scalance M812-1 \(annex B\) Firmware Siemens scalance M816-1 \(annex A\) Siemens scalance M816-1 \(annex A\) Firmware Siemens scalance M816-1 \(annex B\) Siemens scalance M816-1 \(annex B\) Firmware Siemens scalance M826-2 Shdsl-router Siemens scalance M826-2 Shdsl-router Firmware Siemens scalance M874-2 Siemens scalance M874-2 Firmware Siemens scalance M874-3 Siemens scalance M874-3 3g-router \(cn\) Siemens scalance M874-3 3g-router \(cn\) Firmware Siemens scalance M874-3 Firmware Siemens scalance M876-3 Siemens scalance M876-3 \(rok\) Siemens scalance M876-3 \(rok\) Firmware Siemens scalance M876-3 Firmware Siemens scalance M876-4 Siemens scalance M876-4 \(eu\) Siemens scalance M876-4 \(eu\) Firmware Siemens scalance M876-4 \(nam\) Siemens scalance M876-4 \(nam\) Firmware Siemens scalance M876-4 Firmware Siemens scalance Mum853-1 \(a1\) Siemens scalance Mum853-1 \(a1\) Firmware Siemens scalance Mum853-1 \(b1\) Siemens scalance Mum853-1 \(b1\) Firmware Siemens scalance Mum853-1 \(eu\) Siemens scalance Mum853-1 \(eu\) Firmware Siemens scalance Mum856-1 \(a1\) Siemens scalance Mum856-1 \(a1\) Firmware Siemens scalance Mum856-1 \(b1\) Siemens scalance Mum856-1 \(b1\) Firmware Siemens scalance Mum856-1 \(cn\) Siemens scalance Mum856-1 \(cn\) Firmware Siemens scalance Mum856-1 \(eu\) Siemens scalance Mum856-1 \(eu\) Firmware Siemens scalance Mum856-1 \(row\) Siemens scalance Mum856-1 \(row\) Firmware Siemens scalance S615 Eec Lan-router Siemens scalance S615 Eec Lan-router Firmware Siemens scalance S615 Lan-router Siemens scalance S615 Lan-router Firmware
CPEs		cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_eu:-:::::::* cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_nam:-:::::::* cpe:2.3:h:siemens:scalance_m804pb:-:::::::* cpe:2.3:h:siemens:scalance_m812-1_\(annex_a\):-:::::::* cpe:2.3:h:siemens:scalance_m812-1_\(annex_b\):-:::::::* cpe:2.3:h:siemens:scalance_m816-1_\(annex_a\):-:::::::* cpe:2.3:h:siemens:scalance_m816-1_\(annex_b\):-:::::::* cpe:2.3:h:siemens:scalance_m826-2_shdsl-router:-:::::::* cpe:2.3:h:siemens:scalance_m874-2:-:::::::* cpe:2.3:h:siemens:scalance_m874-3:-:::::::* cpe:2.3:h:siemens:scalance_m874-3_3g-router_\(cn\):-:::::::* cpe:2.3:h:siemens:scalance_m876-3:-:::::::* cpe:2.3:h:siemens:scalance_m876-3_\(rok\):-:::::::* cpe:2.3:h:siemens:scalance_m876-4:-:::::::* cpe:2.3:h:siemens:scalance_m876-4_\(eu\):-:::::::* cpe:2.3:h:siemens:scalance_m876-4_\(nam\):-:::::::* cpe:2.3:h:siemens:scalance_mum853-1_\(a1\):-:::::::* cpe:2.3:h:siemens:scalance_mum853-1_\(b1\):-:::::::* cpe:2.3:h:siemens:scalance_mum853-1_\(eu\):-:::::::* cpe:2.3:h:siemens:scalance_mum856-1_\(a1\):-:::::::* cpe:2.3:h:siemens:scalance_mum856-1_\(b1\):-:::::::* cpe:2.3:h:siemens:scalance_mum856-1_\(cn\):-:::::::* cpe:2.3:h:siemens:scalance_mum856-1_\(eu\):-:::::::* cpe:2.3:h:siemens:scalance_mum856-1_\(row\):-:::::::* cpe:2.3:h:siemens:scalance_s615_eec_lan-router:-:::::::* cpe:2.3:h:siemens:scalance_s615_lan-router:-:::::::* cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_eu_firmware:::::::: cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_nam_firmware:::::::: cpe:2.3:o:siemens:scalance_m804pb_firmware:::::::: cpe:2.3:o:siemens:scalance_m812-1_\(annex_a\)_firmware:::::::: cpe:2.3:o:siemens:scalance_m812-1_\(annex_b\)_firmware:::::::: cpe:2.3:o:siemens:scalance_m816-1_\(annex_a\)_firmware:::::::: cpe:2.3:o:siemens:scalance_m816-1_\(annex_b\)_firmware:::::::: cpe:2.3:o:siemens:scalance_m826-2_shdsl-router_firmware:::::::: cpe:2.3:o:siemens:scalance_m874-2_firmware:::::::: cpe:2.3:o:siemens:scalance_m874-3_3g-router_\(cn\)_firmware:::::::: cpe:2.3:o:siemens:scalance_m874-3_firmware:::::::: cpe:2.3:o:siemens:scalance_m876-3_\(rok\)_firmware:::::::: cpe:2.3:o:siemens:scalance_m876-3_firmware:::::::: cpe:2.3:o:siemens:scalance_m876-4_\(eu\)_firmware:::::::: cpe:2.3:o:siemens:scalance_m876-4_\(nam\)_firmware:::::::: cpe:2.3:o:siemens:scalance_m876-4_firmware:::::::: cpe:2.3:o:siemens:scalance_mum853-1_\(a1\)_firmware:::::::: cpe:2.3:o:siemens:scalance_mum853-1_\(b1\)_firmware:::::::: cpe:2.3:o:siemens:scalance_mum853-1_\(eu\)_firmware:::::::: cpe:2.3:o:siemens:scalance_mum856-1_\(a1\)_firmware:::::::: cpe:2.3:o:siemens:scalance_mum856-1_\(b1\)_firmware:::::::: cpe:2.3:o:siemens:scalance_mum856-1_\(cn\)_firmware:::::::: cpe:2.3:o:siemens:scalance_mum856-1_\(eu\)_firmware:::::::: cpe:2.3:o:siemens:scalance_mum856-1_\(row\)_firmware:::::::: cpe:2.3:o:siemens:scalance_s615_eec_lan-router_firmware:::::::: cpe:2.3:o:siemens:scalance_s615_lan-router_firmware::::::::
Vendors & Products		Siemens Siemens ruggedcom Rm1224 Lte\(4g\) Eu Siemens ruggedcom Rm1224 Lte\(4g\) Eu Firmware Siemens ruggedcom Rm1224 Lte\(4g\) Nam Siemens ruggedcom Rm1224 Lte\(4g\) Nam Firmware Siemens scalance M804pb Siemens scalance M804pb Firmware Siemens scalance M812-1 \(annex A\) Siemens scalance M812-1 \(annex A\) Firmware Siemens scalance M812-1 \(annex B\) Siemens scalance M812-1 \(annex B\) Firmware Siemens scalance M816-1 \(annex A\) Siemens scalance M816-1 \(annex A\) Firmware Siemens scalance M816-1 \(annex B\) Siemens scalance M816-1 \(annex B\) Firmware Siemens scalance M826-2 Shdsl-router Siemens scalance M826-2 Shdsl-router Firmware Siemens scalance M874-2 Siemens scalance M874-2 Firmware Siemens scalance M874-3 Siemens scalance M874-3 3g-router \(cn\) Siemens scalance M874-3 3g-router \(cn\) Firmware Siemens scalance M874-3 Firmware Siemens scalance M876-3 Siemens scalance M876-3 \(rok\) Siemens scalance M876-3 \(rok\) Firmware Siemens scalance M876-3 Firmware Siemens scalance M876-4 Siemens scalance M876-4 \(eu\) Siemens scalance M876-4 \(eu\) Firmware Siemens scalance M876-4 \(nam\) Siemens scalance M876-4 \(nam\) Firmware Siemens scalance M876-4 Firmware Siemens scalance Mum853-1 \(a1\) Siemens scalance Mum853-1 \(a1\) Firmware Siemens scalance Mum853-1 \(b1\) Siemens scalance Mum853-1 \(b1\) Firmware Siemens scalance Mum853-1 \(eu\) Siemens scalance Mum853-1 \(eu\) Firmware Siemens scalance Mum856-1 \(a1\) Siemens scalance Mum856-1 \(a1\) Firmware Siemens scalance Mum856-1 \(b1\) Siemens scalance Mum856-1 \(b1\) Firmware Siemens scalance Mum856-1 \(cn\) Siemens scalance Mum856-1 \(cn\) Firmware Siemens scalance Mum856-1 \(eu\) Siemens scalance Mum856-1 \(eu\) Firmware Siemens scalance Mum856-1 \(row\) Siemens scalance Mum856-1 \(row\) Firmware Siemens scalance S615 Eec Lan-router Siemens scalance S615 Eec Lan-router Firmware Siemens scalance S615 Lan-router Siemens scalance S615 Lan-router Firmware

Tue, 13 Aug 2024 14:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 13 Aug 2024 08:00:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.1). Affected devices insert sensitive information about the generation of 2FA tokens into log files. This could allow an authenticated remote attacker to forge 2FA tokens of other users.
Weaknesses		CWE-532
References		https://cert-portal.siemens.com/productcert/html/ssa-087301.html
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C'}` cvssV4_0 `{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}`

MITRE

Status: PUBLISHED

Assigner: siemens

Published: 2024-08-13T07:54:39.417Z

Updated: 2024-08-13T13:29:07.876Z

Reserved: 2024-07-25T11:00:11.939Z

Link: CVE-2024-41978

Vulnrichment

Updated: 2024-08-13T13:29:03.474Z

NVD

Status : Analyzed

Published: 2024-08-13T08:15:15.903

Modified: 2024-08-23T18:34:36.283

Link: CVE-2024-41978

Redhat

No data.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object