CVE-2024-41978

State
Published
Severity
7.1 High
Published
Aug 13, 2024
Updated
Aug 13, 2024
Reserved
Jul 25, 2024

Read the record on cve.org

Description

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.1). Affected devices insert sensitive information about the generation of 2FA tokens into log files. This could allow an authenticated remote attacker to forge 2FA tokens of other users.

Scores

CVSSScoreVectorSource
4.07.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:Nsiemens
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csiemens

Weaknesses

  • CWE-532 Insertion of Sensitive Information into Log File

Affected Products

ProductVersions
RUGGEDCOM RM1224 LTE(4G) EUSiemens
  • before V8.1Affected
RUGGEDCOM RM1224 LTE(4G) NAMSiemens
  • before V8.1Affected
SCALANCE M804PBSiemens
  • before V8.1Affected
SCALANCE M812-1 ADSL-Router familySiemens
  • before V8.1Affected
SCALANCE M816-1 ADSL-Router familySiemens
  • before V8.1Affected
SCALANCE M826-2 SHDSL-RouterSiemens
  • before V8.1Affected
SCALANCE M874-2Siemens
  • before V8.1Affected
SCALANCE M874-3Siemens
  • before V8.1Affected
SCALANCE M874-3 3G-Router (CN)Siemens
  • before V8.1Affected
SCALANCE M876-3Siemens
  • before V8.1Affected
SCALANCE M876-3 (ROK)Siemens
  • before V8.1Affected
SCALANCE M876-4Siemens
  • before V8.1Affected
SCALANCE M876-4 (EU)Siemens
  • before V8.1Affected
SCALANCE M876-4 (NAM)Siemens
  • before V8.1Affected
SCALANCE MUM853-1 (A1)Siemens
  • before V8.1Affected
SCALANCE MUM853-1 (B1)Siemens
  • before V8.1Affected
SCALANCE MUM853-1 (EU)Siemens
  • before V8.1Affected
SCALANCE MUM856-1 (A1)Siemens
  • before V8.1Affected
SCALANCE MUM856-1 (B1)Siemens
  • before V8.1Affected
SCALANCE MUM856-1 (CN)Siemens
  • before V8.1Affected
SCALANCE MUM856-1 (EU)Siemens
  • before V8.1Affected
SCALANCE MUM856-1 (RoW)Siemens
  • before V8.1Affected
SCALANCE S615 EEC LAN-RouterSiemens
  • before V8.1Affected
SCALANCE S615 LAN-RouterSiemens
  • before V8.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.