description: Affected devices allow to change the password, but insufficiently check which password is to be changed. With this  an authenticated attacker could, under certain conditions, be able to change the password of another, potential admin user allowing her to escalate her privileges.
problem types: CWE-567: Unsynchronized Access to Shared Data in a Multithreaded Context
affected:
{
vendor: Siemens
product: RUGGEDCOM RM1224 LTE(4G) EU
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RM1224 LTE(4G) NAM
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M804PB
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M812-1 ADSL-Router (Annex A)
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M812-1 ADSL-Router (Annex B)
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M816-1 ADSL-Router (Annex A)
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M816-1 ADSL-Router (Annex B)
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M826-2 SHDSL-Router
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M874-2
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M874-3
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-3 (EVDO)
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-3 (ROK)
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-4
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-4 (EU)
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-4 (NAM)
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE MUM853-1 (EU)
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE MUM856-1 (EU)
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE MUM856-1 (RoW)
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE S615
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE S615 EEC
versions:
status: affected, version: 0, lessThan: V8.0, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB205-3 (SC, PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB205-3 (ST, E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB205-3 (ST, E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB205-3 (ST, PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB205-3LD (SC, E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB205-3LD (SC, PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB208 (E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB208 (PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB213-3 (SC, E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB213-3 (SC, PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB213-3 (ST, E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB213-3 (ST, PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB213-3LD (SC, E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB213-3LD (SC, PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB216 (E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB216 (PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2 (SC)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2 (ST/BFOC)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2G PoE
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2G PoE (54 V DC)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2G PoE EEC (54 V DC)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2SFP
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2SFP EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2SFP G
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2SFP G (EIP DEF.)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2SFP G EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208G
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208G (EIP def.)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208G EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208G PoE
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208G PoE (54 V DC)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216-3G PoE
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216-3G PoE (54 V DC)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216-4C
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216-4C G
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216-4C G (EIP Def.)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216-4C G EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC224
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC224-4C G
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC224-4C G (EIP Def.)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC224-4C G EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XF204
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XF204 DNA
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XF204-2BA
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XF204-2BA DNA
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP208
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP208 (Ethernet/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP208EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP208PoE EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP216
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP216 (Ethernet/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP216EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP216POE EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR324WG (24 x FE, AC 230V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR324WG (24 X FE, DC 24V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR326-2C PoE WG
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR326-2C PoE WG (without UL)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR328-4C WG (24XFE, 4XGE, 24V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR328-4C WG (28xGE, AC 230V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR328-4C WG (28xGE, DC 24V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET SCALANCE XC206-2
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET SCALANCE XC206-2SFP
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET SCALANCE XC208
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET SCALANCE XC216-4C
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C
baseScore: 6.5
baseSeverity: MEDIUM
]