CVE-2024-37990: Siemens SIMATIC Reader RF610R Cmiit Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0) (All versions < V4.2), SIMATIC Reader RF615R ETSI (6GT2811-6CC10-0AA0) (All versions < V4.2), SIMATIC Reader RF615R FCC (6GT2811-6CC10-1AA0) (All versions < V4.2), SIMATIC Reader RF650R ARIB (6GT2811-6AB20-4AA0) (All versions < V4.2), SIMATIC Reader RF650R CMIIT (6GT2811-6AB20-2AA0) (All versions < V4.2), SIMATIC Reader RF650R ETSI (6GT2811-6AB20-0AA0) (All versions < V4.2), SIMATIC Reader RF650R FCC (6GT2811-6AB20-1AA0) (All versions < V4.2), SIMATIC Reader RF680R ARIB (6GT2811-6AA10-4AA0) (All versions < V4.2), SIMATIC Reader RF680R CMIIT (6GT2811-6AA10-2AA0) (All versions < V4.2), SIMATIC Reader RF680R ETSI (6GT2811-6AA10-0AA0) (All versions < V4.2), SIMATIC Reader RF680R FCC (6GT2811-6AA10-1AA0) (All versions < V4.2), SIMATIC Reader RF685R ARIB (6GT2811-6CA10-4AA0) (All versions < V4.2), SIMATIC Reader RF685R CMIIT (6GT2811-6CA10-2AA0) (All versions < V4.2), SIMATIC Reader RF685R ETSI (6GT2811-6CA10-0AA0) (All versions < V4.2), SIMATIC Reader RF685R FCC (6GT2811-6CA10-1AA0) (All versions < V4.2), SIMATIC RF1140R (6GT2831-6CB00) (All versions < V1.1), SIMATIC RF1170R (6GT2831-6BB00) (All versions < V1.1), SIMATIC RF166C (6GT2002-0EE20) (All versions < V2.2), SIMATIC RF185C (6GT2002-0JE10) (All versions < V2.2), SIMATIC RF186C (6GT2002-0JE20) (All versions < V2.2), SIMATIC RF186CI (6GT2002-0JE50) (All versions < V2.2), SIMATIC RF188C (6GT2002-0JE40) (All versions < V2.2), SIMATIC RF188CI (6GT2002-0JE60) (All versions < V2.2), SIMATIC RF360R (6GT2801-5BA30) (All versions < V2.2). The affected applications contain configuration files which can be modified. An attacker with privilege access can modify these files and enable features that are not released for this device.

Affected products

Siemens SIMATIC Reader RF610R Cmiit Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF610R Etsi Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF610R Fcc Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF615R Cmiit Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF615R Etsi Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF615R Fcc Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF650R Arib Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF650R Cmiit Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF650R Etsi Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF650R Fcc Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF680R Arib Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF680R Cmiit Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF680R Etsi Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF680R Fcc Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF685R Arib Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF685R Cmiit Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF685R Etsi Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC Reader RF685R Fcc Firmware: before 4.2 (fixed in 4.2)
Siemens SIMATIC RF1140R Firmware: before 1.1 (fixed in 1.1)
Siemens SIMATIC RF1170R Firmware: before 1.1 (fixed in 1.1)
Siemens SIMATIC RF166C Firmware: before 2.2 (fixed in 2.2)
Siemens SIMATIC RF185C Firmware: before 2.2 (fixed in 2.2)
Siemens SIMATIC RF186C Firmware: before 2.2 (fixed in 2.2)
Siemens SIMATIC RF186CI Firmware: before 2.2 (fixed in 2.2)
Siemens SIMATIC RF188C Firmware: before 2.2 (fixed in 2.2)
and 2 more

Published 2024-09-10. Last modified 2026-06-17.