CVE-2023-44320
Assigner: siemens
Published: 2023-11-14T11:03:59.528Z
State: PUBLISHED
descriptions: value: Affected devices do not properly validate the authentication when performing certain modifications in the web interface allowing an authenticated attacker to influence the user interface configured by an administrator.
affected: vendor: Siemens
product: RUGGEDCOM RM1224 LTE(4G) EU
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: RUGGEDCOM RM1224 LTE(4G) NAM
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M804PB
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M812-1 ADSL-Router (Annex A)
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M812-1 ADSL-Router (Annex B)
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M816-1 ADSL-Router (Annex A)
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M816-1 ADSL-Router (Annex B)
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M826-2 SHDSL-Router
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M874-2
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M874-3
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M876-3 (EVDO)
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M876-3 (ROK)
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M876-4
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M876-4 (EU)
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE M876-4 (NAM)
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE MUM853-1 (EU)
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE MUM856-1 (EU)
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE MUM856-1 (RoW)
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE S615
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE S615 EEC
versions: status: affected
version: All versions
defaultStatus: unknown
vendor: Siemens
product: SCALANCE SC622-2C
versions: status: affected
version: 0
lessThan: V3.1
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE SC626-2C
versions: status: affected
version: 0
lessThan: V3.1
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE SC632-2C
versions: status: affected
version: 0
lessThan: V3.1
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE SC636-2C
versions: status: affected
version: 0
lessThan: V3.1
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE SC642-2C
versions: status: affected
version: 0
lessThan: V3.1
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE SC646-2C
versions: status: affected
version: 0
lessThan: V3.1
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB205-3 (SC, PN)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB205-3 (ST, E/IP)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB205-3 (ST, E/IP)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB205-3 (ST, PN)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB205-3LD (SC, E/IP)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB205-3LD (SC, PN)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB208 (E/IP)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB208 (PN)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB213-3 (SC, E/IP)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB213-3 (SC, PN)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB213-3 (ST, E/IP)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB213-3 (ST, PN)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB213-3LD (SC, E/IP)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB213-3LD (SC, PN)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB216 (E/IP)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XB216 (PN)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC206-2 (SC)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC206-2 (ST/BFOC)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC206-2G PoE
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC206-2G PoE (54 V DC)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC206-2G PoE EEC (54 V DC)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC206-2SFP
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC206-2SFP EEC
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC206-2SFP G
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC206-2SFP G (EIP DEF.)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC206-2SFP G EEC
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC208
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC208EEC
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC208G
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC208G (EIP def.)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC208G EEC
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC208G PoE
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC208G PoE (54 V DC)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC216
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC216-3G PoE
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC216-3G PoE (54 V DC)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC216-4C
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC216-4C G
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC216-4C G (EIP Def.)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC216-4C G EEC
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC216EEC
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC224
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC224-4C G
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC224-4C G (EIP Def.)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XC224-4C G EEC
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XF204
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XF204 DNA
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XF204-2BA
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XF204-2BA DNA
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XP208
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XP208 (Ethernet/IP)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XP208EEC
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XP208PoE EEC
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XP216
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XP216 (Ethernet/IP)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XP216EEC
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XP216POE EEC
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XR324WG (24 x FE, AC 230V)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XR324WG (24 X FE, DC 24V)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XR326-2C PoE WG
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XR326-2C PoE WG (without UL)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XR328-4C WG (24XFE, 4XGE, 24V)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XR328-4C WG (28xGE, AC 230V)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SCALANCE XR328-4C WG (28xGE, DC 24V)
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SIPLUS NET SCALANCE XC206-2
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SIPLUS NET SCALANCE XC206-2SFP
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SIPLUS NET SCALANCE XC208
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SIPLUS NET SCALANCE XC216-4C
versions: status: affected
version: 0
lessThan: V4.5
versionType: custom
defaultStatus: unknown
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
baseScore: 4.3
baseSeverity: MEDIUM
problemTypes: descriptions: cweId: CWE-425
description: CWE-425: Direct Request ('Forced Browsing')
type: CWE