Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-86597
HistoryNov 15, 2023 - 12:00 a.m.

Multiple Siemens Products Use Trusted Data to Accept Unrelated Untrusted Data Vulnerability

2023-11-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
18
siemens
untrusted data
vulnerability
routers
communication devices
industrial components
exploited
arbitrary code

AI Score

7.8

Confidence

Low

EPSS

0.001

Percentile

30.9%

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers (PLCs) or Human Machine Interfaces (HMIs), that comply with the IEEE 802.11 standard (802.11ac, 802.11a/b/g/h and/or 802.11n).SCALANCE W-1700 products are wireless communication devices based on the IEEE 802.11ac standard. They are used to connect various WLAN devices (access points or clients, depending on the operating mode), with a focus on industrial components such as programmable logic controllers (PLCs) or human-machine interfaces (HMIs).SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLCs) or human-machine interfaces (HMIs). An untrusted data vulnerability exists in multiple Siemens products that is not related to the use of trusted data acceptance, which could be exploited by an attacker to execute arbitrary code on the device.

AI Score

7.8

Confidence

Low

EPSS

0.001

Percentile

30.9%

Related for CNVD-2023-86597