Log in Start free

Vulnerability · Published Sep 10, 2024 · Assigned by siemens

CVE-2024-37992

Medium 4.9

In plain English

A medium-severity security flaw in SIMATIC Reader RF610R CMIIT from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).

Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.4%top 64.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0) (All versions < V4.2), SIMATIC Reader RF615R ETSI (6GT2811-6CC10-0AA0) (All versions < V4.2), SIMATIC Reader RF615R FCC (6GT2811-6CC10-1AA0) (All versions < V4.2), SIMATIC Reader RF650R ARIB (6GT2811-6AB20-4AA0) (All versions < V4.2), SIMATIC Reader RF650R CMIIT (6GT2811-6AB20-2AA0) (All versions < V4.2), SIMATIC Reader RF650R ETSI (6GT2811-6AB20-0AA0) (All versions < V4.2), SIMATIC Reader RF650R FCC (6GT2811-6AB20-1AA0) (All versions < V4.2), SIMATIC Reader RF680R ARIB (6GT2811-6AA10-4AA0) (All versions < V4.2), SIMATIC Reader RF680R CMIIT (6GT2811-6AA10-2AA0) (All versions < V4.2), SIMATIC Reader RF680R ETSI (6GT2811-6AA10-0AA0) (All versions < V4.2), SIMATIC Reader RF680R FCC (6GT2811-6AA10-1AA0) (All versions < V4.2), SIMATIC Reader RF685R ARIB (6GT2811-6CA10-4AA0) (All versions < V4.2), SIMATIC Reader RF685R CMIIT (6GT2811-6CA10-2AA0) (All versions < V4.2), SIMATIC Reader RF685R ETSI (6GT2811-6CA10-0AA0) (All versions < V4.2), SIMATIC Reader RF685R FCC (6GT2811-6CA10-1AA0) (All versions < V4.2), SIMATIC RF1140R (6GT2831-6CB00) (All versions < V1.1), SIMATIC RF1170R (6GT2831-6BB00) (All versions < V1.1), SIMATIC RF166C (6GT2002-0EE20) (All versions < V2.2), SIMATIC RF185C (6GT2002-0JE10) (All versions < V2.2), SIMATIC RF186C (6GT2002-0JE20) (All versions < V2.2), SIMATIC RF186CI (6GT2002-0JE50) (All versions < V2.2), SIMATIC RF188C (6GT2002-0JE40) (All versions < V2.2), SIMATIC RF188CI (6GT2002-0JE60) (All versions < V2.2), SIMATIC RF360R (6GT2801-5BA30) (All versions < V2.2). The affected devices does not properly handle the error in case of exceeding characters while setting SNMP leading to the restart of the application.

Affected products (as reported)

VendorProductVersions
Siemens SIMATIC Reader RF610R CMIIT 0 – before V4.2
Siemens SIMATIC Reader RF610R ETSI 0 – before V4.2
Siemens SIMATIC Reader RF610R FCC 0 – before V4.2
Siemens SIMATIC Reader RF615R CMIIT 0 – before V4.2
Siemens SIMATIC Reader RF615R ETSI 0 – before V4.2
Siemens SIMATIC Reader RF615R FCC 0 – before V4.2
Siemens SIMATIC Reader RF650R ARIB 0 – before V4.2
Siemens SIMATIC Reader RF650R CMIIT 0 – before V4.2
Siemens SIMATIC Reader RF650R ETSI 0 – before V4.2
Siemens SIMATIC Reader RF650R FCC 0 – before V4.2
Siemens SIMATIC Reader RF680R ARIB 0 – before V4.2
Siemens SIMATIC Reader RF680R CMIIT 0 – before V4.2
Siemens SIMATIC Reader RF680R ETSI 0 – before V4.2
Siemens SIMATIC Reader RF680R FCC 0 – before V4.2
Siemens SIMATIC Reader RF685R ARIB 0 – before V4.2
Siemens SIMATIC Reader RF685R CMIIT 0 – before V4.2
Siemens SIMATIC Reader RF685R ETSI 0 – before V4.2
Siemens SIMATIC Reader RF685R FCC 0 – before V4.2
Siemens SIMATIC RF1140R 0 – before V1.1
Siemens SIMATIC RF1170R 0 – before V1.1
Siemens SIMATIC RF166C 0 – before V2.2
Siemens SIMATIC RF185C 0 – before V2.2
Siemens SIMATIC RF186C 0 – before V2.2
Siemens SIMATIC RF186CI 0 – before V2.2
Siemens SIMATIC RF188C 0 – before V2.2
Siemens SIMATIC RF188CI 0 – before V2.2
Siemens SIMATIC RF360R 0 – before V2.2

Weakness: CWE-703 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References