Riskcovery

CVE-2024-41797

State
Published
Severity
5.3 Medium
Published
Jun 10, 2025
Updated
Jun 10, 2025
Reserved
Jul 22, 2024

Read the record on cve.org

Description

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 (6GK5328-4TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2) (All versions < V3.1), SCALANCE XC332 (6GK5332-0GA00-2AC2) (All versions < V3.1), SCALANCE XC416-8 (6GK5424-8TR00-2AC2) (All versions < V3.1), SCALANCE XC424-4 (6GK5428-4TR00-2AC2) (All versions < V3.1), SCALANCE XC432 (6GK5432-0GR00-2AC2) (All versions < V3.1), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.1), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.1), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.1), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-2AR3) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-3AR3) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-4AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-2AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-3AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-4AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-2AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-3AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-4AR3) (All versions < V3.1), SCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-2AR3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-3AR3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-4AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-2AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-3AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-4AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-2AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-3AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-4AR3) (All versions < V3.1), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.1), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.1), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.1), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.1). Affected devices contain an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with "guest" role to invoke an internal "do system" command which exceeds their privileges. This command allows the execution of certain low-risk actions, the most critical of which is clearing the local system log.

Scores

CVSSScoreVectorSource
4.05.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:Nsiemens
3.14.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:Nsiemens

Weaknesses

  • CWE-269 Improper Privilege Management

Affected Products

ProductVersions
RUGGEDCOM RST2428PSiemens
  • before V3.1Affected
SCALANCE XC316-8Siemens
  • before V3.1Affected
SCALANCE XC324-4Siemens
  • before V3.1Affected
SCALANCE XC324-4 EECSiemens
  • before V3.1Affected
SCALANCE XC332Siemens
  • before V3.1Affected
SCALANCE XC416-8Siemens
  • before V3.1Affected
SCALANCE XC424-4Siemens
  • before V3.1Affected
SCALANCE XC432Siemens
  • before V3.1Affected
SCALANCE XCH328Siemens
  • before V3.1Affected
SCALANCE XCM324Siemens
  • before V3.1Affected
SCALANCE XCM328Siemens
  • before V3.1Affected
SCALANCE XCM332Siemens
  • before V3.1Affected
SCALANCE XR302-32Siemens
  • before V3.1Affected
SCALANCE XR302-32Siemens
  • before V3.1Affected
SCALANCE XR302-32Siemens
  • before V3.1Affected
SCALANCE XR322-12Siemens
  • before V3.1Affected
SCALANCE XR322-12Siemens
  • before V3.1Affected
SCALANCE XR322-12Siemens
  • before V3.1Affected
SCALANCE XR326-8Siemens
  • before V3.1Affected
SCALANCE XR326-8Siemens
  • before V3.1Affected
SCALANCE XR326-8Siemens
  • before V3.1Affected
SCALANCE XR326-8 EECSiemens
  • before V3.1Affected
SCALANCE XR502-32Siemens
  • before V3.1Affected
SCALANCE XR502-32Siemens
  • before V3.1Affected
SCALANCE XR502-32Siemens
  • before V3.1Affected
SCALANCE XR522-12Siemens
  • before V3.1Affected
SCALANCE XR522-12Siemens
  • before V3.1Affected
SCALANCE XR522-12Siemens
  • before V3.1Affected
SCALANCE XR526-8Siemens
  • before V3.1Affected
SCALANCE XR526-8Siemens
  • before V3.1Affected
SCALANCE XR526-8Siemens
  • before V3.1Affected
SCALANCE XRH334 (24 V DC, 8xFO, CC)Siemens
  • before V3.1Affected
SCALANCE XRM334 (230 V AC, 12xFO)Siemens
  • before V3.1Affected
SCALANCE XRM334 (230 V AC, 8xFO)Siemens
  • before V3.1Affected
SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)Siemens
  • before V3.1Affected
SCALANCE XRM334 (24 V DC, 12xFO)Siemens
  • before V3.1Affected
SCALANCE XRM334 (24 V DC, 8xFO)Siemens
  • before V3.1Affected
SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)Siemens
  • before V3.1Affected
SCALANCE XRM334 (2x230 V AC, 12xFO)Siemens
  • before V3.1Affected
SCALANCE XRM334 (2x230 V AC, 8xFO)Siemens
  • before V3.1Affected
SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)Siemens
  • before V3.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.