CVE-2023-44318
- State
- Published
- Severity
- 6.9 Medium
- Published
- Nov 14, 2023
- Updated
- Feb 25, 2026
- Reserved
- Sep 28, 2023
Description
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | siemens |
| 3.1 | 4.9 Medium | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N | siemens |
Weaknesses
- CWE-321 Use of Hard-coded Cryptographic Key
Affected Products
| Product | Versions |
|---|---|
RUGGEDCOM RM1224 LTE(4G) EUSiemens |
|
RUGGEDCOM RM1224 LTE(4G) NAMSiemens |
|
SCALANCE M804PBSiemens |
|
SCALANCE M812-1 ADSL-RouterSiemens |
|
SCALANCE M812-1 ADSL-RouterSiemens |
|
SCALANCE M816-1 ADSL-RouterSiemens |
|
SCALANCE M816-1 ADSL-RouterSiemens |
|
SCALANCE M826-2 SHDSL-RouterSiemens |
|
SCALANCE M874-2Siemens |
|
SCALANCE M874-3Siemens |
|
SCALANCE M876-3Siemens |
|
SCALANCE M876-3 (ROK)Siemens |
|
SCALANCE M876-4Siemens |
|
SCALANCE M876-4 (EU)Siemens |
|
SCALANCE M876-4 (NAM)Siemens |
|
SCALANCE MUM853-1 (EU)Siemens |
|
SCALANCE MUM856-1 (EU)Siemens |
|
SCALANCE MUM856-1 (RoW)Siemens |
|
SCALANCE S615 EEC LAN-RouterSiemens |
|
SCALANCE S615 LAN-RouterSiemens |
|
SCALANCE XB205-3 (SC, PN)Siemens |
|
SCALANCE XB205-3 (ST, E/IP)Siemens |
|
SCALANCE XB205-3 (ST, E/IP)Siemens |
|
SCALANCE XB205-3 (ST, PN)Siemens |
|
SCALANCE XB205-3LD (SC, E/IP)Siemens |
|
SCALANCE XB205-3LD (SC, PN)Siemens |
|
SCALANCE XB206-2 (SC)Siemens |
|
SCALANCE XB206-2 (ST/BFOC)Siemens |
|
SCALANCE XB206-2 LDSiemens |
|
SCALANCE XB206-2 SCSiemens |
|
SCALANCE XB206-2 STSiemens |
|
SCALANCE XB206-2LDSiemens |
|
SCALANCE XB208 (E/IP)Siemens |
|
SCALANCE XB208 (PN)Siemens |
|
SCALANCE XB213-3 (SC, E/IP)Siemens |
|
SCALANCE XB213-3 (SC, PN)Siemens |
|
SCALANCE XB213-3 (ST, E/IP)Siemens |
|
SCALANCE XB213-3 (ST, PN)Siemens |
|
SCALANCE XB213-3LD (SC, E/IP)Siemens |
|
SCALANCE XB213-3LD (SC, PN)Siemens |
|
SCALANCE XB216 (E/IP)Siemens |
|
SCALANCE XB216 (PN)Siemens |
|
SCALANCE XC206-2 (SC)Siemens |
|
SCALANCE XC206-2 (ST/BFOC)Siemens |
|
SCALANCE XC206-2G PoESiemens |
|
SCALANCE XC206-2G PoE (54 V DC)Siemens |
|
SCALANCE XC206-2G PoE EEC (54 V DC)Siemens |
|
SCALANCE XC206-2SFPSiemens |
|
SCALANCE XC206-2SFP EECSiemens |
|
SCALANCE XC206-2SFP GSiemens |
|
SCALANCE XC206-2SFP G (EIP DEF.)Siemens |
|
SCALANCE XC206-2SFP G EECSiemens |
|
SCALANCE XC208Siemens |
|
SCALANCE XC208EECSiemens |
|
SCALANCE XC208GSiemens |
|
SCALANCE XC208G (EIP def.)Siemens |
|
SCALANCE XC208G EECSiemens |
|
SCALANCE XC208G PoESiemens |
|
SCALANCE XC208G PoE (54 V DC)Siemens |
|
SCALANCE XC216Siemens |
|
SCALANCE XC216-3G PoESiemens |
|
SCALANCE XC216-3G PoE (54 V DC)Siemens |
|
SCALANCE XC216-4CSiemens |
|
SCALANCE XC216-4C GSiemens |
|
SCALANCE XC216-4C G (EIP Def.)Siemens |
|
SCALANCE XC216-4C G EECSiemens |
|
SCALANCE XC216EECSiemens |
|
SCALANCE XC224Siemens |
|
SCALANCE XC224-4C GSiemens |
|
SCALANCE XC224-4C G (EIP Def.)Siemens |
|
SCALANCE XC224-4C G EECSiemens |
|
SCALANCE XF204Siemens |
|
SCALANCE XF204 DNASiemens |
|
SCALANCE XF204-2BASiemens |
|
SCALANCE XF204-2BA DNASiemens |
|
SCALANCE XF204GSiemens |
|
SCALANCE XP208Siemens |
|
SCALANCE XP208Siemens |
|
SCALANCE XP208 (Ethernet/IP)Siemens |
|
SCALANCE XP208EECSiemens |
|
SCALANCE XP208EECSiemens |
|
SCALANCE XP208GSiemens |
|
SCALANCE XP208G EECSiemens |
|
SCALANCE XP208G PoE EECSiemens |
|
SCALANCE XP208G PPSiemens |
|
SCALANCE XP208PoE EECSiemens |
|
SCALANCE XP208PoE EECSiemens |
|
SCALANCE XP216Siemens |
|
SCALANCE XP216 (Ethernet/IP)Siemens |
|
SCALANCE XP216 (V2)Siemens |
|
SCALANCE XP216EECSiemens |
|
SCALANCE XP216EEC (V2)Siemens |
|
SCALANCE XP216GSiemens |
|
SCALANCE XP216G EECSiemens |
|
SCALANCE XP216G PoE EECSiemens |
|
SCALANCE XP216POE EECSiemens |
|
SCALANCE XP216PoE EEC (V2)Siemens |
|
SCALANCE XR324WG (24 x FE, AC 230V)Siemens |
|
SCALANCE XR324WG (24 X FE, DC 24V)Siemens |
|
SCALANCE XR326-2C PoE WGSiemens |
|
SCALANCE XR326-2C PoE WG (without UL)Siemens |
|
SCALANCE XR328-4C WG (24XFE, 4XGE, 24V)Siemens |
|
SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V)Siemens |
|
SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)Siemens |
|
SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)Siemens |
|
SCALANCE XR328-4C WG (28xGE, AC 230V)Siemens |
|
SCALANCE XR328-4C WG (28xGE, DC 24V)Siemens |
|
SIPLUS NET SCALANCE XC206-2Siemens |
|
SIPLUS NET SCALANCE XC206-2SFPSiemens |
|
SIPLUS NET SCALANCE XC208Siemens |
|
SIPLUS NET SCALANCE XC216-4CSiemens |
|
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-180704.html
- https://cert-portal.siemens.com/productcert/html/ssa-353002.html
- https://cert-portal.siemens.com/productcert/html/ssa-690517.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.