CVE-2023-44373: Siemens 6ag1206-2bb00-7ac2 Firmware

Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.

Affected products

Siemens 6ag1206-2bb00-7ac2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6ag1206-2bs00-7ac2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6ag1208-0ba00-7ac2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6ag1216-4bs00-7ac2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5204-0ba00-2gf2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5204-0ba00-2yf2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5204-2aa00-2gf2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5204-2aa00-2yf2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5205-3bb00-2ab2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5205-3bb00-2tb2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5205-3bd00-2ab2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5205-3bd00-2tb2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5205-3bf00-2ab2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5205-3bf00-2tb2 Firmware: up to and including 4.5
Siemens 6gk5206-2bb00-2ac2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5206-2bd00-2ac2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5206-2bs00-2ac2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5206-2bs00-2fc2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5206-2gs00-2ac2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5206-2gs00-2fc2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5206-2gs00-2tc2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5206-2rs00-2ac2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5206-2rs00-5ac2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5206-2rs00-5fc2 Firmware: before 4.5 (fixed in 4.5)
Siemens 6gk5208-0ba00-2ab2 Firmware: before 4.5 (fixed in 4.5)
and 46 more

Published 2023-11-14. Last modified 2026-06-17.