Improper Neutralization of Special Elements in Output Used by a Downstream Component in Siemens products - CVE-2023-44373

Vulnerability identifier: #VU83425

CSH Severity: Low

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-44373

CWE-ID: CWE-74

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation. A remote administrator can execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

SCALANCE XP208PoE EEC
SCALANCE XC216EEC
SCALANCE XC224
SCALANCE XC224-4C G
SCALANCE XC224-4C G EEC
SCALANCE XF204
SCALANCE XF204 DNA
SCALANCE XF204-2BA
SCALANCE XF204-2BA DNA
SCALANCE XP208
SCALANCE XP208EEC
SCALANCE XC216-4C G EEC
SCALANCE XP216
SCALANCE XP216EEC
SCALANCE XP216POE EEC
SCALANCE XR324WG
SCALANCE XR326-2C PoE WG
SCALANCE XR328-4C WG
SIPLUS NET SCALANCE XC206-2
SIPLUS NET SCALANCE XC206-2SFP
SIPLUS NET SCALANCE XC208
SIPLUS NET SCALANCE XC216-4C
SCALANCE XC206-2SFP G
SCALANCE XB205-3LD
SCALANCE XB208
SCALANCE XB213-3
SCALANCE XB213-3LD
SCALANCE XB216
SCALANCE XC206-2
SCALANCE XC206-2G PoE
SCALANCE XC206-2G PoE EEC
SCALANCE XC206-2SFP
SCALANCE XC206-2SFP EEC
SCALANCE XB205-3
SCALANCE XC206-2SFP G EEC
SCALANCE XC208
SCALANCE XC208EEC
SCALANCE XC208G
SCALANCE XC208G EEC
SCALANCE XC208G PoE
SCALANCE XC216
SCALANCE XC216-3G PoE
SCALANCE XC216-4C
SCALANCE XC216-4C G
SCALANCE WAM763-1
SCALANCE WAM766-1
SCALANCE WAM766-1 EEC
SCALANCE WUM763-1
SCALANCE WUM766-1
SCALANCE S615 EEC
SCALANCE MUM856-1 (RoW)
SCALANCE MUM856-1 (EU)
SCALANCE MUM853-1 (EU)
SCALANCE M876-4 (NAM)
SCALANCE M876-4 (EU)
SCALANCE M876-4
SCALANCE M876-3 (ROK)
SCALANCE M876-3 (EVDO)
SCALANCE M874-3
SCALANCE M874-2
SCALANCE M826-2 SHDSL-Router
SCALANCE M816-1 ADSL-Router (Annex B)
SCALANCE M816-1 ADSL-Router (Annex A)
SCALANCE M812-1 ADSL-Router (Annex B)
SCALANCE M812-1 ADSL-Router (Annex A)
SCALANCE M804PB
RUGGEDCOM RM1224 LTE(4G) NAM
RUGGEDCOM RM1224 LTE(4G) EU
SCALANCE S615

Install updates from vendor's website.

SCALANCE XP208PoE EEC - update to 4.5
SCALANCE XC216EEC - update to 4.5
SCALANCE XC224 - update to 4.5
SCALANCE XC224-4C G - update to 4.5
SCALANCE XC224-4C G EEC - update to 4.5
SCALANCE XF204 - update to 4.5
SCALANCE XF204 DNA - update to 4.5
SCALANCE XF204-2BA - update to 4.5
SCALANCE XF204-2BA DNA - update to 4.5
SCALANCE XP208 - update to 4.5
SCALANCE XP208EEC - update to 4.5
SCALANCE XC216-4C G EEC - update to 4.5
SCALANCE XP216 - update to 4.5
SCALANCE XP216EEC - update to 4.5
SCALANCE XP216POE EEC - update to 4.5
SCALANCE XR324WG - update to 4.5
SCALANCE XR326-2C PoE WG - update to 4.5
SCALANCE XR328-4C WG - update to 4.5
SIPLUS NET SCALANCE XC206-2 - update to 4.5
SIPLUS NET SCALANCE XC206-2SFP - update to 4.5
SIPLUS NET SCALANCE XC208 - update to 4.5
SIPLUS NET SCALANCE XC216-4C - update to 4.5
SCALANCE XC206-2SFP G - update to 4.5
SCALANCE XB205-3LD - update to 4.5
SCALANCE XB208 - update to 4.5
SCALANCE XB213-3 - update to 4.5
SCALANCE XB213-3LD - update to 4.5
SCALANCE XB216 - update to 4.5
SCALANCE XC206-2 - update to 4.5
SCALANCE XC206-2G PoE - update to 4.5
SCALANCE XC206-2G PoE EEC - update to 4.5
SCALANCE XC206-2SFP - update to 4.5
SCALANCE XC206-2SFP EEC - update to 4.5
SCALANCE XB205-3 - update to 4.5
SCALANCE XC206-2SFP G EEC - update to 4.5
SCALANCE XC208 - update to 4.5
SCALANCE XC208EEC - update to 4.5
SCALANCE XC208G - update to 4.5
SCALANCE XC208G EEC - update to 4.5
SCALANCE XC208G PoE - update to 4.5
SCALANCE XC216 - update to 4.5
SCALANCE XC216-3G PoE - update to 4.5
SCALANCE XC216-4C - update to 4.5
SCALANCE XC216-4C G - update to 4.5
SCALANCE S615 EEC - update to 8.0
SCALANCE S615 - update to 8.0
SCALANCE MUM856-1 (RoW) - update to 8.0
SCALANCE MUM856-1 (EU) - update to 8.0
SCALANCE MUM853-1 (EU) - update to 8.0
SCALANCE M876-4 (NAM) - update to 8.0
SCALANCE M876-4 (EU) - update to 8.0
SCALANCE M876-4 - update to 8.0
SCALANCE M876-3 (ROK) - update to 8.0
SCALANCE M876-3 (EVDO) - update to 8.0
SCALANCE M874-3 - update to 8.0
SCALANCE M874-2 - update to 8.0
SCALANCE M826-2 SHDSL-Router - update to 8.0
SCALANCE M816-1 ADSL-Router (Annex B) - update to 8.0
SCALANCE M816-1 ADSL-Router (Annex A) - update to 8.0
SCALANCE M812-1 ADSL-Router (Annex B) - update to 8.0
SCALANCE M812-1 ADSL-Router (Annex A) - update to 8.0
SCALANCE M804PB - update to 8.0
RUGGEDCOM RM1224 LTE(4G) NAM - update to 8.0
RUGGEDCOM RM1224 LTE(4G) EU - update to 8.0

• https://cert-portal.siemens.com/productcert/txt/ssa-699386.txt

• Multiple vulnerabilities in Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family
• Multiple vulnerabilities in Siemens SCALANCE M-800/S615 Family
• Multiple vulnerabilities in Siemens SCALANCE W700 802.11 AX Family