Siemens 6gk5876-3aa02-2ba2 Firmware vulnerabilities

4 CVEs affecting Siemens 6gk5876-3aa02-2ba2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49692, published 2023-12-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-41990, published 2021-10-18. High severity, CVSS 7.5. EPSS: 6.7% chance of exploitation in the next 30 days. The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA…
CVE-2022-31765, published 2022-10-11. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.
CVE-2023-49691, published 2023-12-12. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB…
CVE-2023-49692, published 2023-12-12. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE…