Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration infor
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.
| Vendor | Product | Versions |
|---|---|---|
| Siemens | RUGGEDCOM RM1224 LTE(4G) EU | 0 |
| Siemens | RUGGEDCOM RM1224 LTE(4G) NAM | 0 |
| Siemens | SCALANCE M804PB | 0 |
| Siemens | SCALANCE M812 | 1 ADSL-Router — 0 |
| Siemens | SCALANCE M812 | 1 ADSL-Router — 0 |
| Siemens | SCALANCE M816 | 1 ADSL-Router — 0 |
| Siemens | SCALANCE M816 | 1 ADSL-Router — 0 |
| Siemens | SCALANCE M826 | 2 SHDSL-Router — 0 |
| Siemens | SCALANCE M874 | 2 — 0 |
| Siemens | SCALANCE M874 | 3 — 0 |
| Siemens | SCALANCE M876 | 3 — 0 |
| Siemens | SCALANCE M876 | 3 (ROK) — 0 |
| Siemens | SCALANCE M876 | 4 — 0 |
| Siemens | SCALANCE M876 | 4 (EU) — 0 |
| Siemens | SCALANCE M876 | 4 (NAM) — 0 |
| Siemens | SCALANCE MUM853 | 1 (EU) — 0 |
| Siemens | SCALANCE MUM856 | 1 (EU) — 0 |
| Siemens | SCALANCE MUM856 | 1 (RoW) — 0 |
| Siemens | SCALANCE S615 EEC LAN | Router — 0 |
| Siemens | SCALANCE S615 LAN | Router — 0 |
| Siemens | SCALANCE XB205 | 3 (SC, PN) — 0 |
| Siemens | SCALANCE XB205 | 3 (ST, E/IP) — 0 |
| Siemens | SCALANCE XB205 | 3 (ST, E/IP) — 0 |
| Siemens | SCALANCE XB205 | 3 (ST, PN) — 0 |
| Siemens | SCALANCE XB205 | 3LD (SC, E/IP) — 0 |
| Siemens | SCALANCE XB205 | 3LD (SC, PN) — 0 |
| Siemens | SCALANCE XB206 | 2 (SC) — 0 |
| Siemens | SCALANCE XB206 | 2 (ST/BFOC) — 0 |
| Siemens | SCALANCE XB206 | 2 LD — 0 |
| Siemens | SCALANCE XB206 | 2 SC — 0 |
| Siemens | SCALANCE XB206 | 2 ST — 0 |
| Siemens | SCALANCE XB206 | 2LD — 0 |
| Siemens | SCALANCE XB208 (E/IP) | 0 |
| Siemens | SCALANCE XB208 (PN) | 0 |
| Siemens | SCALANCE XB213 | 3 (SC, E/IP) — 0 |
| Siemens | SCALANCE XB213 | 3 (SC, PN) — 0 |
| Siemens | SCALANCE XB213 | 3 (ST, E/IP) — 0 |
| Siemens | SCALANCE XB213 | 3 (ST, PN) — 0 |
| Siemens | SCALANCE XB213 | 3LD (SC, E/IP) — 0 |
| Siemens | SCALANCE XB213 | 3LD (SC, PN) — 0 |
| Siemens | SCALANCE XB216 (E/IP) | 0 |
| Siemens | SCALANCE XB216 (PN) | 0 |
| Siemens | SCALANCE XC206 | 2 (SC) — 0 |
| Siemens | SCALANCE XC206 | 2 (ST/BFOC) — 0 |
| Siemens | SCALANCE XC206 | 2G PoE — 0 |
| Siemens | SCALANCE XC206 | 2G PoE (54 V DC) — 0 |
| Siemens | SCALANCE XC206 | 2G PoE EEC (54 V DC) — 0 |
| Siemens | SCALANCE XC206 | 2SFP — 0 |
| Siemens | SCALANCE XC206 | 2SFP EEC — 0 |
| Siemens | SCALANCE XC206 | 2SFP G — 0 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.