Siemens 6gk5748-1fc00-0ab0 Firmware vulnerabilities

2 CVEs affecting Siemens 6gk5748-1fc00-0ab0 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31765, published 2022-10-11.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-26141, published 2021-05-11. Medium severity, CVSS 6.5. EPSS: 3.1% chance of exploitation in the next 30 days. An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An…
• CVE-2022-31765, published 2022-10-11. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.