Advisories · Technology

Siemens SCALANCE M874-2.

Every CVE that names Siemens SCALANCE M874-2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-40833 CVE record

CVSS 8.7 High

NULL pointer dereference in Siemens IE/PB LINK HA and others
- Siemens IE/PB LINK HA
- Siemens IE/PB link PN IO
- Memory corruption
Not analysed yet 12 May 2026
CVE-2025-23384 CVE record

CVSS 6.3 Medium

Siemens RUGGEDCOM RM1224 LTE(4G) EU: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- CWE-187
Not analysed yet 11 Mar 2025
CVE-2024-50572 CVE record

CVSS 8.6 High

Injection in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Other injection
Not analysed yet 12 Nov 2024
CVE-2024-50561 CVE record

CVSS 5.1 Medium

Cross-site scripting in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Cross-site scripting (XSS)
Not analysed yet 12 Nov 2024
CVE-2024-50560 CVE record

CVSS 2.3 Low

Improper input validation in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- CWE-20
Not analysed yet 12 Nov 2024
CVE-2024-50559 CVE record

CVSS 5.1 Medium

Path traversal in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Path traversal
Not analysed yet 12 Nov 2024
CVE-2024-50558 CVE record

CVSS 5.3 Medium

Improper access control in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Broken access control
Not analysed yet 12 Nov 2024
CVE-2024-50557 CVE record

CVSS 8.6 High

Improper input validation in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- CWE-20
Not analysed yet 12 Nov 2024
CVE-2024-41978 CVE record

CVSS 7.1 High

Sensitive information in log files in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Information disclosure
Not analysed yet 13 Aug 2024
CVE-2024-41977 CVE record

CVSS 7.3 High

Siemens RUGGEDCOM RM1224 LTE(4G) EU: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- CWE-488
Not analysed yet 13 Aug 2024
CVE-2024-41976 CVE record

CVSS 8.6 High

Improper input validation in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- CWE-20
Not analysed yet 13 Aug 2024
CVE-2023-49692 CVE record

CVSS 7.2 High

OS command injection in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Command injection
Not analysed yet 12 Dec 2023
CVE-2023-49691 CVE record

CVSS 7.2 High

OS command injection in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Command injection
Not analysed yet 12 Dec 2023
CVE-2023-44374 CVE record

CVSS 7.1 High

Siemens RUGGEDCOM RM1224 LTE(4G) EU: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- CWE-567
Not analysed yet 14 Nov 2023
CVE-2023-44373 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Injection in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Other injection
Not analysed yet 14 Nov 2023
CVE-2023-44322 CVE record

CVSS 3.7 Low

Unchecked return value in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- CWE-252
Not analysed yet 14 Nov 2023
CVE-2023-44321 CVE record

CVSS 5.1 Medium

Uncontrolled resource consumption in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Denial of service
Not analysed yet 14 Nov 2023
CVE-2023-44320 CVE record

CVSS 4.3 Medium

Forced browsing in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Broken access control
Not analysed yet 14 Nov 2023
CVE-2023-44319 CVE record

CVSS 6.9 Medium

Weak hash in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Weak cryptography or TLS
Not analysed yet 14 Nov 2023
CVE-2023-44318 CVE record

CVSS 6.9 Medium

Hard-coded cryptographic key in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Hard-coded credentials
Not analysed yet 14 Nov 2023
CVE-2023-44317 CVE record

CVSS 8.6 High

Siemens RUGGEDCOM RM1224 LTE(4G) EU: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- CWE-349
Not analysed yet 14 Nov 2023
CVE-2022-46143 CVE record

CVSS 5.1 Medium

Affected devices do not check the TFTP blocksize correctly.
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- CWE-1284
Not analysed yet 13 Dec 2022
CVE-2022-46142 CVE record

CVSS 5.2 Medium

Affected devices store the CLI user passwords encrypted in flash memory.
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- CWE-257
Not analysed yet 13 Dec 2022
CVE-2022-46140 CVE record

CVSS 7.1 High

Broken or risky cryptographic algorithm in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Weak cryptography or TLS
Not analysed yet 13 Dec 2022
CVE-2022-31766 CVE record

CVSS 8.6 High

Improper input validation in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- CWE-20
Not analysed yet 11 Oct 2022
CVE-2022-31765 CVE record

CVSS 8.8 High

Missing authorization in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Broken access control
Not analysed yet 11 Oct 2022
CVE-2022-36325 CVE record

CVSS 6.8 Medium

Cross-site scripting in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Cross-site scripting (XSS)
Not analysed yet 10 Aug 2022
CVE-2022-36324 CVE record

CVSS 7.5 High

Resource allocation without limits in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Denial of service
Not analysed yet 10 Aug 2022
CVE-2022-36323 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Injection in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Other injection
Not analysed yet 10 Aug 2022
CVE-2022-34821 CVE record

CVSS 8.8 High

Code injection in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Code injection
Not analysed yet 12 Jul 2022
CVE-2020-28400 CVE record

CVSS 8.7 High

Resource allocation without limits in Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet… and others
- Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
- Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
- Denial of service
Not analysed yet 13 Jul 2021
CVE-2019-13946 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet… and others
- Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
- Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
- Denial of service
Not analysed yet 11 Feb 2020