Siemens SCALANCE M-800/S615 Series Information Disclosure Vulnerability

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers. An information disclosure vulnerability exists in the Siemens SCALANCE M-800/S615 series due to the affected devices not properly checking the TFTP block size. An attacker who is allowed to authenticate could exploit the vulnerability to read data from an uninitialized buffer that may contain previously allocated data.