Vulnerability · Published Oct 23, 2024 · Assigned by siemens
CVE-2024-47904
High 7.8
In plain English
A high-severity security flaw in InterMesh 7177 Hybrid 2.0 Subscriber from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Official description
A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The affected devices contain a SUID binary that could allow an authenticated local attacker to execute arbitrary commands with root privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | InterMesh 7177 Hybrid 2.0 Subscriber | 0 – before V8.2.12 |
| Siemens | InterMesh 7707 Fire Subscriber | 0 – before V7.2.12 |
Weakness: CWE-266 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H