description: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (All versions < V7.2), RUGGEDCOM RM1224 LTE(4G) NAM (All versions < V7.2), SCALANCE M804PB (All versions < V7.2), SCALANCE M812-1 ADSL-Router (Annex A) (All versions < V7.2), SCALANCE M812-1 ADSL-Router (Annex B) (All versions < V7.2), SCALANCE M816-1 ADSL-Router (Annex A) (All versions < V7.2), SCALANCE M816-1 ADSL-Router (Annex B) (All versions < V7.2), SCALANCE M826-2 SHDSL-Router (All versions < V7.2), SCALANCE M874-2 (All versions < V7.2), SCALANCE M874-3 (All versions < V7.2), SCALANCE M876-3 (EVDO) (All versions < V7.2), SCALANCE M876-3 (ROK) (All versions < V7.2), SCALANCE M876-4 (All versions < V7.2), SCALANCE M876-4 (EU) (All versions < V7.2), SCALANCE M876-4 (NAM) (All versions < V7.2), SCALANCE MUM853-1 (EU) (All versions < V7.2), SCALANCE MUM856-1 (EU) (All versions < V7.2), SCALANCE MUM856-1 (RoW) (All versions < V7.2), SCALANCE S615 (All versions < V7.2), SCALANCE S615 EEC (All versions < V7.2), SCALANCE SC622-2C (All versions < V2.3), SCALANCE SC622-2C (All versions >= V2.3 < V3.0), SCALANCE SC626-2C (All versions < V2.3), SCALANCE SC626-2C (All versions >= V2.3 < V3.0), SCALANCE SC632-2C (All versions < V2.3), SCALANCE SC632-2C (All versions >= V2.3 < V3.0), SCALANCE SC636-2C (All versions < V2.3), SCALANCE SC636-2C (All versions >= V2.3 < V3.0), SCALANCE SC642-2C (All versions < V2.3), SCALANCE SC642-2C (All versions >= V2.3 < V3.0), SCALANCE SC646-2C (All versions < V2.3), SCALANCE SC646-2C (All versions >= V2.3 < V3.0), SCALANCE WAM763-1 (All versions), SCALANCE WAM766-1 (EU) (All versions), SCALANCE WAM766-1 (US) (All versions), SCALANCE WAM766-1 EEC (EU) (All versions), SCALANCE WAM766-1 EEC (US) (All versions), SCALANCE WUM763-1 (All versions), SCALANCE WUM763-1 (All versions), SCALANCE WUM766-1 (EU) (All versions), SCALANCE WUM766-1 (US) (All versions), SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions < V3.3.46), SIMATIC CP 1243-7 LTE US (All versions < V3.3.46), SIMATIC CP 1243-8 IRC (All versions < V3.3.46), SIMATIC CP 1542SP-1 IRC (All versions >= V2.0 < V2.2.28), SIMATIC CP 1543-1 (All versions < V3.0.22), SIMATIC CP 1543SP-1 (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions >= V2.0 < V2.2.28), SIPLUS NET CP 1242-7 V2 (All versions < V3.3.46), SIPLUS NET CP 1543-1 (All versions < V3.0.22), SIPLUS S7-1200 CP 1243-1 (All versions < V3.3.46), SIPLUS S7-1200 CP 1243-1 RAIL (All versions < V3.3.46). By injecting code to specific configuration options for OpenVPN, an attacker could execute arbitrary code with elevated privileges.
problem types: CWE-94: Improper Control of Generation of Code ('Code Injection')
affected:
{
vendor: Siemens
product: RUGGEDCOM RM1224 LTE(4G) EU
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RM1224 LTE(4G) NAM
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M804PB
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M812-1 ADSL-Router (Annex A)
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M812-1 ADSL-Router (Annex B)
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M816-1 ADSL-Router (Annex A)
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M816-1 ADSL-Router (Annex B)
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M826-2 SHDSL-Router
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M874-2
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M874-3
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-3 (EVDO)
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-3 (ROK)
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-4
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-4 (EU)
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-4 (NAM)
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE MUM853-1 (EU)
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE MUM856-1 (EU)
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE MUM856-1 (RoW)
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE S615
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE S615 EEC
versions:
version: All versions < V7.2, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC622-2C
versions:
version: All versions < V2.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC622-2C
versions:
version: All versions >= V2.3 < V3.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC626-2C
versions:
version: All versions < V2.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC626-2C
versions:
version: All versions >= V2.3 < V3.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC632-2C
versions:
version: All versions < V2.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC632-2C
versions:
version: All versions >= V2.3 < V3.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC636-2C
versions:
version: All versions < V2.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC636-2C
versions:
version: All versions >= V2.3 < V3.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC642-2C
versions:
version: All versions < V2.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC642-2C
versions:
version: All versions >= V2.3 < V3.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC646-2C
versions:
version: All versions < V2.3, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC646-2C
versions:
version: All versions >= V2.3 < V3.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE WAM763-1
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE WAM766-1 (EU)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE WAM766-1 (US)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE WAM766-1 EEC (EU)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE WAM766-1 EEC (US)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE WUM763-1
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE WUM763-1
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE WUM766-1 (EU)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE WUM766-1 (US)
versions:
version: All versions, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 1242-7 V2
versions:
version: All versions < V3.3.46, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 1243-1
versions:
version: All versions < V3.3.46, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 1243-7 LTE EU
versions:
version: All versions < V3.3.46, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 1243-7 LTE US
versions:
version: All versions < V3.3.46, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 1243-8 IRC
versions:
version: All versions < V3.3.46, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 1542SP-1 IRC
versions:
version: All versions >= V2.0 < V2.2.28, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 1543-1
versions:
version: All versions < V3.0.22, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIMATIC CP 1543SP-1
versions:
version: All versions >= V2.0 < V2.2.28, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL
versions:
version: All versions >= V2.0 < V2.2.28, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS ET 200SP CP 1543SP-1 ISEC
versions:
version: All versions >= V2.0 < V2.2.28, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL
versions:
version: All versions >= V2.0 < V2.2.28, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET CP 1242-7 V2
versions:
version: All versions < V3.3.46, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET CP 1543-1
versions:
version: All versions < V3.0.22, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS S7-1200 CP 1243-1
versions:
version: All versions < V3.3.46, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS S7-1200 CP 1243-1 RAIL
versions:
version: All versions < V3.3.46, status: affected
defaultStatus: unknown
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 7.6
baseSeverity: HIGH
]