CVE-2024-41797 
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 (6GK5328-4TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2) (All versions < V3.1), SCALANCE XC332 (6GK5332-0GA00-2AC2) (All versions < V3.1), SCALANCE XC416-8 (6GK5424-8TR00-2AC2) (All versions < V3.1), SCALANCE XC424-4 (6GK5428-4TR00-2AC2) (All versions < V3.1), SCALANCE XC432 (6GK5432-0GR00-2AC2) (All versions < V3.1), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.1), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.1), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.1), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-2AR3) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-3AR3) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-4AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-2AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-3AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-4AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-2AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-3AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-4AR3) (All versions < V3.1), SCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-2AR3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-3AR3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-4AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-2AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-3AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-4AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-2AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-3AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-4AR3) (All versions < V3.1), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.1), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.1), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.1), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.1). Affected devices contain an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with "guest" role to invoke an internal "do system" command which exceeds their privileges. This command allows the execution of certain low-risk actions, the most critical of which is clearing the local system log.
Problem types: cwe_id: CWE-269
description: CWE-269: Improper Privilege Management
Affected products: vendor: Siemens
product: RUGGEDCOM RST2428P
default_status: unknown
vendor: Siemens
product: SCALANCE XC316-8
default_status: unknown
vendor: Siemens
product: SCALANCE XC324-4
default_status: unknown
vendor: Siemens
product: SCALANCE XC324-4 EEC
default_status: unknown
vendor: Siemens
product: SCALANCE XC332
default_status: unknown
vendor: Siemens
product: SCALANCE XC416-8
default_status: unknown
vendor: Siemens
product: SCALANCE XC424-4
default_status: unknown
vendor: Siemens
product: SCALANCE XC432
default_status: unknown
vendor: Siemens
product: SCALANCE XCH328
default_status: unknown
vendor: Siemens
product: SCALANCE XCM324
default_status: unknown
vendor: Siemens
product: SCALANCE XCM328
default_status: unknown
vendor: Siemens
product: SCALANCE XCM332
default_status: unknown
vendor: Siemens
product: SCALANCE XR302-32
default_status: unknown
vendor: Siemens
product: SCALANCE XR302-32
default_status: unknown
vendor: Siemens
product: SCALANCE XR302-32
default_status: unknown
vendor: Siemens
product: SCALANCE XR322-12
default_status: unknown
vendor: Siemens
product: SCALANCE XR322-12
default_status: unknown
vendor: Siemens
product: SCALANCE XR322-12
default_status: unknown
vendor: Siemens
product: SCALANCE XR326-8
default_status: unknown
vendor: Siemens
product: SCALANCE XR326-8
default_status: unknown
vendor: Siemens
product: SCALANCE XR326-8
default_status: unknown
vendor: Siemens
product: SCALANCE XR326-8 EEC
default_status: unknown
vendor: Siemens
product: SCALANCE XR502-32
default_status: unknown
vendor: Siemens
product: SCALANCE XR502-32
default_status: unknown
vendor: Siemens
product: SCALANCE XR502-32
default_status: unknown
vendor: Siemens
product: SCALANCE XR522-12
default_status: unknown
vendor: Siemens
product: SCALANCE XR522-12
default_status: unknown
vendor: Siemens
product: SCALANCE XR522-12
default_status: unknown
vendor: Siemens
product: SCALANCE XR526-8
default_status: unknown
vendor: Siemens
product: SCALANCE XR526-8
default_status: unknown
vendor: Siemens
product: SCALANCE XR526-8
default_status: unknown
vendor: Siemens
product: SCALANCE XRH334 (24 V DC, 8xFO, CC)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (230 V AC, 12xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (230 V AC, 8xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (24 V DC, 12xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (24 V DC, 8xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (2x230 V AC, 12xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (2x230 V AC, 8xFO)
default_status: unknown
vendor: Siemens
product: SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
baseScore: 4.3
baseSeverity: MEDIUM
Published: 2025-06-10T15:17:11.253Z