CVE-2023-44373
- State
- Published
- Severity
- 9.4 Critical
- Published
- Nov 14, 2023
- Updated
- Apr 14, 2026
- Reserved
- Sep 28, 2023
Description
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.4 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H | siemens |
| 3.1 | 9.1 Critical | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C | siemens |
Weaknesses
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Affected Products
| Product | Versions |
|---|---|
RUGGEDCOM RM1224 LTE(4G) EUSiemens |
|
RUGGEDCOM RM1224 LTE(4G) NAMSiemens |
|
SCALANCE M804PBSiemens |
|
SCALANCE M812-1 ADSL-RouterSiemens |
|
SCALANCE M812-1 ADSL-RouterSiemens |
|
SCALANCE M816-1 ADSL-RouterSiemens |
|
SCALANCE M816-1 ADSL-RouterSiemens |
|
SCALANCE M826-2 SHDSL-RouterSiemens |
|
SCALANCE M874-2Siemens |
|
SCALANCE M874-3Siemens |
|
SCALANCE M876-3Siemens |
|
SCALANCE M876-3 (ROK)Siemens |
|
SCALANCE M876-4Siemens |
|
SCALANCE M876-4 (EU)Siemens |
|
SCALANCE M876-4 (NAM)Siemens |
|
SCALANCE MUM853-1 (EU)Siemens |
|
SCALANCE MUM856-1 (EU)Siemens |
|
SCALANCE MUM856-1 (RoW)Siemens |
|
SCALANCE S615 EEC LAN-RouterSiemens |
|
SCALANCE S615 LAN-RouterSiemens |
|
SCALANCE W721-1 RJ45Siemens |
|
SCALANCE W721-1 RJ45Siemens |
|
SCALANCE W722-1 RJ45Siemens |
|
SCALANCE W722-1 RJ45Siemens |
|
SCALANCE W722-1 RJ45Siemens |
|
SCALANCE W734-1 RJ45Siemens |
|
SCALANCE W734-1 RJ45Siemens |
|
SCALANCE W734-1 RJ45Siemens |
|
SCALANCE W734-1 RJ45 (USA)Siemens |
|
SCALANCE W738-1 M12Siemens |
|
SCALANCE W738-1 M12Siemens |
|
SCALANCE W748-1 M12Siemens |
|
SCALANCE W748-1 M12Siemens |
|
SCALANCE W748-1 RJ45Siemens |
|
SCALANCE W748-1 RJ45Siemens |
|
SCALANCE W761-1 RJ45Siemens |
|
SCALANCE W761-1 RJ45Siemens |
|
SCALANCE W774-1 M12 EECSiemens |
|
SCALANCE W774-1 M12 EECSiemens |
|
SCALANCE W774-1 RJ45Siemens |
|
SCALANCE W774-1 RJ45Siemens |
|
SCALANCE W774-1 RJ45Siemens |
|
SCALANCE W774-1 RJ45Siemens |
|
SCALANCE W774-1 RJ45 (USA)Siemens |
|
SCALANCE W778-1 M12Siemens |
|
SCALANCE W778-1 M12Siemens |
|
SCALANCE W778-1 M12 EECSiemens |
|
SCALANCE W778-1 M12 EEC (USA)Siemens |
|
SCALANCE W786-1 RJ45Siemens |
|
SCALANCE W786-1 RJ45Siemens |
|
SCALANCE W786-2 RJ45Siemens |
|
SCALANCE W786-2 RJ45Siemens |
|
SCALANCE W786-2 RJ45Siemens |
|
SCALANCE W786-2 SFPSiemens |
|
SCALANCE W786-2 SFPSiemens |
|
SCALANCE W786-2IA RJ45Siemens |
|
SCALANCE W786-2IA RJ45Siemens |
|
SCALANCE W788-1 M12Siemens |
|
SCALANCE W788-1 M12Siemens |
|
SCALANCE W788-1 RJ45Siemens |
|
SCALANCE W788-1 RJ45Siemens |
|
SCALANCE W788-2 M12Siemens |
|
SCALANCE W788-2 M12Siemens |
|
SCALANCE W788-2 M12 EECSiemens |
|
SCALANCE W788-2 M12 EECSiemens |
|
SCALANCE W788-2 M12 EECSiemens |
|
SCALANCE W788-2 RJ45Siemens |
|
SCALANCE W788-2 RJ45Siemens |
|
SCALANCE W788-2 RJ45Siemens |
|
SCALANCE WAB762-1Siemens |
|
SCALANCE WAM763-1Siemens |
|
SCALANCE WAM763-1 (ME)Siemens |
|
SCALANCE WAM763-1 (US)Siemens |
|
SCALANCE WAM766-1Siemens |
|
SCALANCE WAM766-1 (ME)Siemens |
|
SCALANCE WAM766-1 (US)Siemens |
|
SCALANCE WAM766-1 EECSiemens |
|
SCALANCE WAM766-1 EEC (ME)Siemens |
|
SCALANCE WAM766-1 EEC (US)Siemens |
|
SCALANCE WUB762-1Siemens |
|
SCALANCE WUB762-1 iFeaturesSiemens |
|
SCALANCE WUM763-1Siemens |
|
SCALANCE WUM763-1Siemens |
|
SCALANCE WUM763-1 (US)Siemens |
|
SCALANCE WUM763-1 (US)Siemens |
|
SCALANCE WUM766-1Siemens |
|
SCALANCE WUM766-1 (ME)Siemens |
|
SCALANCE WUM766-1 (USA)Siemens |
|
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-699386.html
- https://cert-portal.siemens.com/productcert/html/ssa-180704.html
- https://cert-portal.siemens.com/productcert/html/ssa-602936.html
- https://cert-portal.siemens.com/productcert/html/ssa-690517.html
- https://cert-portal.siemens.com/productcert/html/ssa-721642.html
- https://cert-portal.siemens.com/productcert/html/ssa-019200.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.