Siemens 6gk5853-2ea00-2da1 Firmware vulnerabilities

3 CVEs affecting Siemens 6gk5853-2ea00-2da1 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49692, published 2023-12-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-31765, published 2022-10-11. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.
CVE-2023-49691, published 2023-12-12. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB…
CVE-2023-49692, published 2023-12-12. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE…