Information disclosure in Siemens products - CVE-2023-22791

Vulnerability identifier: #VU81906

CSH Severity: Medium

CVSS v4: 5.9 [CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-22791

CWE-ID: CWE-200

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A remote user on the local network can gain unauthorized access to sensitive information on the system.

SCALANCE W1750D (JP)
SCALANCE W1750D (ROW)
SCALANCE W1750D (USA)
Aruba InstantOS
ArubaOS (AOS)

Install updates from vendor's website.

SCALANCE W1750D (JP) - update to 8.10.0.6
SCALANCE W1750D (ROW) - update to 8.10.0.6
SCALANCE W1750D (USA) - update to 8.10.0.6
Aruba InstantOS - addressed in versions 6.4.4.8-4.2.4.21, 6.5.4.24, 8.6.0.20, 8.10.0.3, 8.10.0.5, 8.11.0.0
ArubaOS (AOS) - addressed in versions 10.3.1.1, 10.4.0.0

• https://cert-portal.siemens.com/productcert/txt/ssa-843070.txt

• Multiple vulnerabilities in Siemens SCALANCE W1750D
• Multiple vulnerabilities in Aruba Access Points