Siemens 6gk5206-2rs00-2ac2 Firmware vulnerabilities

8 CVEs affecting Siemens 6gk5206-2rs00-2ac2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-44374, published 2023-11-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44373, published 2023-11-14. Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days. Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of…
CVE-2022-31765, published 2022-10-11. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.
CVE-2023-44321, published 2023-11-14. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service…
CVE-2023-44322, published 2023-11-14. Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB…
CVE-2023-44318, published 2023-11-14. Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days. Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges…
CVE-2023-44374, published 2023-11-14. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB…
CVE-2023-44320, published 2023-11-14. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE…
CVE-2023-44319, published 2023-11-14. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB…