Siemens 6gk5615-0aa00-2aa2 Firmware vulnerabilities

3 CVEs affecting Siemens 6gk5615-0aa00-2aa2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49692, published 2023-12-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-41990, published 2021-10-18. High severity, CVSS 7.5. EPSS: 6.7% chance of exploitation in the next 30 days. The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA…
CVE-2023-49691, published 2023-12-12. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB…
CVE-2023-49692, published 2023-12-12. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE…