Siemens Speedstream Wireless Router vulnerabilities

2 CVEs affecting Siemens Speedstream Wireless Router, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-3907, published 2006-07-27.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-3907, published 2006-07-27. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device hang) by sending a crafted packet to the web administrative interface.
• CVE-2006-3344, published 2006-07-03. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using the Universal Plug and Play UPnP/1.0 component.