cnvd - cnvd-2023-97257

cnvd-2023-97257

Vulnerability from cnvd

Title: Siemens SCALANCE M-800/S615系列操作系统命令注入漏洞

Description:

SCALANCE M-800、MUM-800和S615以及RUGGEDCOM RM1224都是工业路由器。

Siemens SCALANCE M-800/S615系列存在操作系统命令注入漏洞，攻击者可利用该漏洞通过恶意的本地管理员在建立新连接后在系统上执行命令。

Severity: 高

Patch Name: Siemens SCALANCE M-800/S615系列操作系统命令注入漏洞的补丁

Patch Description:

SCALANCE M-800、MUM-800和S615以及RUGGEDCOM RM1224都是工业路由器。

Siemens SCALANCE M-800/S615系列存在操作系统命令注入漏洞，攻击者可利用该漏洞通过恶意的本地管理员在建立新连接后在系统上执行命令。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/html/ssa-077170.html

Reference: https://cert-portal.siemens.com/productcert/html/ssa-077170.html

Impacted products

Name
['Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) < V7.2.2', 'Siemens RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) < V7.2.2', 'Siemens SCALANCE M804PB (6GK5804-0AP00-2AA2) < V7.2.2', 'Siemens SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2) < V7.2.2', 'Siemens SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2) < V7.2.2', 'Siemens SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2) < V7.2.2', 'Siemens SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2) < V7.2.2', 'Siemens SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) < V7.2.2', 'Siemens SCALANCE M874-2 (6GK5874-2AA00-2AA2) < V7.2.2', 'Siemens SCALANCE M874-3 (6GK5874-3AA00-2AA2) < V7.2.2', 'Siemens SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2) < V7.2.2', 'Siemens SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) < V7.2.2', 'Siemens SCALANCE M876-4 (6GK5876-4AA10-2BA2) < V7.2.2', 'Siemens SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) < V7.2.2', 'Siemens SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) < V7.2.2', 'Siemens SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) < V7.2.2', 'Siemens SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) < V7.2.2', 'Siemens SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) < V7.2.2', 'Siemens SCALANCE S615 (6GK5615-0AA00-2AA2) < V7.2.2', 'Siemens SCALANCE S615 EEC (6GK5615-0AA01-2AA2) < V7.2.2']

Name

['Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) < V7.2.2', 'Siemens RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) < V7.2.2', 'Siemens SCALANCE M804PB (6GK5804-0AP00-2AA2) < V7.2.2', 'Siemens SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2) < V7.2.2', 'Siemens SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2) < V7.2.2', 'Siemens SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2) < V7.2.2', 'Siemens SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2) < V7.2.2', 'Siemens SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) < V7.2.2', 'Siemens SCALANCE M874-2 (6GK5874-2AA00-2AA2) < V7.2.2', 'Siemens SCALANCE M874-3 (6GK5874-3AA00-2AA2) < V7.2.2', 'Siemens SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2) < V7.2.2', 'Siemens SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) < V7.2.2', 'Siemens SCALANCE M876-4 (6GK5876-4AA10-2BA2) < V7.2.2', 'Siemens SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) < V7.2.2', 'Siemens SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) < V7.2.2', 'Siemens SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) < V7.2.2', 'Siemens SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) < V7.2.2', 'Siemens SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) < V7.2.2', 'Siemens SCALANCE S615 (6GK5615-0AA00-2AA2) < V7.2.2', 'Siemens SCALANCE S615 EEC (6GK5615-0AA01-2AA2) < V7.2.2']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2023-49692"
    }
  },
  "description": "SCALANCE M-800\u3001MUM-800\u548cS615\u4ee5\u53caRUGGEDCOM RM1224\u90fd\u662f\u5de5\u4e1a\u8def\u7531\u5668\u3002\n\nSiemens SCALANCE M-800/S615\u7cfb\u5217\u5b58\u5728\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u6076\u610f\u7684\u672c\u5730\u7ba1\u7406\u5458\u5728\u5efa\u7acb\u65b0\u8fde\u63a5\u540e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u547d\u4ee4\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-077170.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2023-97257",
  "openTime": "2023-12-13",
  "patchDescription": "SCALANCE M-800\u3001MUM-800\u548cS615\u4ee5\u53caRUGGEDCOM RM1224\u90fd\u662f\u5de5\u4e1a\u8def\u7531\u5668\u3002\r\n\r\nSiemens SCALANCE M-800/S615\u7cfb\u5217\u5b58\u5728\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u6076\u610f\u7684\u672c\u5730\u7ba1\u7406\u5458\u5728\u5efa\u7acb\u65b0\u8fde\u63a5\u540e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u547d\u4ee4\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens SCALANCE M-800/S615\u7cfb\u5217\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) \u003c V7.2.2",
      "Siemens RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) \u003c V7.2.2",
      "Siemens SCALANCE M804PB (6GK5804-0AP00-2AA2) \u003c V7.2.2",
      "Siemens SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2) \u003c V7.2.2",
      "Siemens SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2) \u003c V7.2.2",
      "Siemens SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2) \u003c V7.2.2",
      "Siemens SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2) \u003c V7.2.2",
      "Siemens SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) \u003c V7.2.2",
      "Siemens SCALANCE M874-2 (6GK5874-2AA00-2AA2) \u003c V7.2.2",
      "Siemens SCALANCE M874-3 (6GK5874-3AA00-2AA2) \u003c V7.2.2",
      "Siemens SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2) \u003c V7.2.2",
      "Siemens SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) \u003c V7.2.2",
      "Siemens SCALANCE M876-4 (6GK5876-4AA10-2BA2) \u003c V7.2.2",
      "Siemens SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) \u003c V7.2.2",
      "Siemens SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) \u003c V7.2.2",
      "Siemens SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) \u003c V7.2.2",
      "Siemens SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) \u003c V7.2.2",
      "Siemens SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) \u003c V7.2.2",
      "Siemens SCALANCE S615 (6GK5615-0AA00-2AA2) \u003c V7.2.2",
      "Siemens SCALANCE S615 EEC (6GK5615-0AA01-2AA2) \u003c V7.2.2"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-077170.html",
  "serverity": "\u9ad8",
  "submitTime": "2023-12-13",
  "title": "Siemens SCALANCE M-800/S615\u7cfb\u5217\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e"
}

CVE-2023-49692 (GCVE-0-2023-49692)

Vulnerability from cvelistv5

Published

2023-12-12 11:27

Modified

2024-08-13 07:53

Severity ?

7.2 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Summary

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V7.2.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V7.2.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V7.2.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V7.2.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V7.2.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V7.2.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V7.2.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V7.2.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V7.2.2). An Improper Neutralization of Special Elements used in an OS Command with root privileges vulnerability exists in the parsing of the IPSEC configuration. This could allow malicious local administrators to issue commands on system level after a new connection is established.

References

▼	URL	Tags
	https://cert-portal.siemens.com/productcert/pdf/ssa-068047.pdf
	https://cert-portal.siemens.com/productcert/html/ssa-068047.html
	https://cert-portal.siemens.com/productcert/html/ssa-602936.html

Impacted products

Vendor

Product

Version

▼

Siemens

RUGGEDCOM RM1224 LTE(4G) EU

Version: 0 < V7.2.2

Siemens	RUGGEDCOM RM1224 LTE(4G) NAM	Version: 0 < V7.2.2
Siemens	SCALANCE M804PB	Version: 0 < V7.2.2
Siemens	SCALANCE M812-1 ADSL-Router	Version: 0 < V7.2.2
Siemens	SCALANCE M812-1 ADSL-Router	Version: 0 < V7.2.2
Siemens	SCALANCE M816-1 ADSL-Router	Version: 0 < V7.2.2
Siemens	SCALANCE M816-1 ADSL-Router	Version: 0 < V7.2.2
Siemens	SCALANCE M826-2 SHDSL-Router	Version: 0 < V7.2.2
Siemens	SCALANCE M874-2	Version: 0 < V7.2.2
Siemens	SCALANCE M874-3	Version: 0 < V7.2.2
Siemens	SCALANCE M876-3	Version: 0 < V7.2.2
Siemens	SCALANCE M876-3 (ROK)	Version: 0 < V7.2.2
Siemens	SCALANCE M876-4	Version: 0 < V7.2.2
Siemens	SCALANCE M876-4 (EU)	Version: 0 < V7.2.2
Siemens	SCALANCE M876-4 (NAM)	Version: 0 < V7.2.2
Siemens	SCALANCE MUM853-1 (EU)	Version: 0 < V7.2.2
Siemens	SCALANCE MUM856-1 (EU)	Version: 0 < V7.2.2
Siemens	SCALANCE MUM856-1 (RoW)	Version: 0 < V7.2.2
Siemens	SCALANCE S615 EEC LAN-Router	Version: 0 < V7.2.2
Siemens	SCALANCE S615 LAN-Router	Version: 0 < V7.2.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:01:25.938Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-068047.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-068047.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-602936.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RM1224 LTE(4G) EU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RM1224 LTE(4G) NAM",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M804PB",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M812-1 ADSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M812-1 ADSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M816-1 ADSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M816-1 ADSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M826-2 SHDSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M874-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M874-3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-3 (ROK)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-4",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-4 (EU)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-4 (NAM)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM853-1 (EU)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM856-1 (EU)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM856-1 (RoW)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE S615 EEC LAN-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE S615 LAN-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions \u003c V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions \u003c V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions \u003c V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions \u003c V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions \u003c V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions \u003c V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions \u003c V7.2.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions \u003c V7.2.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions \u003c V7.2.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions \u003c V7.2.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions \u003c V7.2.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions \u003c V7.2.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions \u003c V7.2.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions \u003c V7.2.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions \u003c V7.2.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions \u003c V7.2.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions \u003c V7.2.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions \u003c V7.2.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions \u003c V7.2.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions \u003c V7.2.2). An Improper Neutralization of Special Elements used in an OS Command with root privileges vulnerability exists in the parsing of the IPSEC configuration. This could allow malicious local administrators to issue commands on system level after a new connection is established."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-13T07:53:59.588Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-068047.pdf"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-068047.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-602936.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2023-49692",
    "datePublished": "2023-12-12T11:27:26.231Z",
    "dateReserved": "2023-11-29T17:51:25.463Z",
    "dateUpdated": "2024-08-13T07:53:59.588Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted