CVEvulnerability

CVE-2024-37990

7.0 HIGH Published 2024-09-10 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-09-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
7.0 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-912

Description

A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0) (All versions < V4.2), SIMATIC Reader RF615R ETSI (6GT2811-6CC10-0AA0) (All versions < V4.2), SIMATIC Reader RF615R FCC (6GT2811-6CC10-1AA0) (All versions < V4.2), SIMATIC Reader RF650R ARIB (6GT2811-6AB20-4AA0) (All versions < V4.2), SIMATIC Reader RF650R CMIIT (6GT2811-6AB20-2AA0) (All versions < V4.2), SIMATIC Reader RF650R ETSI (6GT2811-6AB20-0AA0) (All versions < V4.2), SIMATIC Reader RF650R FCC (6GT2811-6AB20-1AA0) (All versions < V4.2), SIMATIC Reader RF680R ARIB (6GT2811-6AA10-4AA0) (All versions < V4.2), SIMATIC Reader RF680R CMIIT (6GT2811-6AA10-2AA0) (All versions < V4.2), SIMATIC Reader RF680R ETSI (6GT2811-6AA10-0AA0) (All versions < V4.2), SIMATIC Reader RF680R FCC (6GT2811-6AA10-1AA0) (All versions < V4.2), SIMATIC Reader RF685R ARIB (6GT2811-6CA10-4AA0) (All versions < V4.2), SIMATIC Reader RF685R CMIIT (6GT2811-6CA10-2AA0) (All versions < V4.2), SIMATIC Reader RF685R ETSI (6GT2811-6CA10-0AA0) (All versions < V4.2), SIMATIC Reader RF685R FCC (6GT2811-6CA10-1AA0) (All versions < V4.2), SIMATIC RF1140R (6GT2831-6CB00) (All versions < V1.1), SIMATIC RF1170R (6GT2831-6BB00) (All versions < V1.1), SIMATIC RF166C (6GT2002-0EE20) (All versions < V2.2), SIMATIC RF185C (6GT2002-0JE10) (All versions < V2.2), SIMATIC RF186C (6GT2002-0JE20) (All versions < V2.2), SIMATIC RF186CI (6GT2002-0JE50) (All versions < V2.2), SIMATIC RF188C (6GT2002-0JE40) (All versions < V2.2), SIMATIC RF188CI (6GT2002-0JE60) (All versions < V2.2), SIMATIC RF360R (6GT2801-5BA30) (All versions < V2.2). The affected applications contain configuration files which can be modified. An attacker with privilege access can modify these files and enable features that are not released for this device.

Affected configurations

• siemens simatic rf360r firmware (< 2.2) • siemens simatic rf1170r firmware (< 1.1) • siemens simatic rf1140r firmware (< 1.1) • siemens simatic reader rf685r fcc firmware (< 4.2) • siemens simatic reader rf685r etsi firmware (< 4.2) • siemens simatic reader rf685r cmiit firmware (< 4.2) • siemens simatic reader rf685r arib firmware (< 4.2) • siemens simatic reader rf680r fcc firmware (< 4.2) • siemens simatic reader rf680r etsi firmware (< 4.2) • siemens simatic reader rf680r cmiit firmware (< 4.2) • siemens simatic reader rf680r arib firmware (< 4.2) • siemens simatic reader rf650r fcc firmware (< 4.2) • siemens simatic reader rf650r etsi firmware (< 4.2) • siemens simatic reader rf650r cmiit firmware (< 4.2) • siemens simatic reader rf650r arib firmware (< 4.2) • siemens simatic reader rf615r fcc firmware (< 4.2) • siemens simatic reader rf615r etsi firmware (< 4.2) • siemens simatic reader rf615r cmiit firmware (< 4.2) • siemens simatic reader rf610r fcc firmware (< 4.2) • siemens simatic reader rf610r etsi firmware (< 4.2) • siemens simatic reader rf610r cmiit firmware (< 4.2) • siemens simatic rf188ci firmware (< 2.2) • siemens simatic rf188c firmware (< 2.2) • siemens simatic rf186ci firmware (< 2.2) • siemens simatic rf186c firmware (< 2.2) • siemens simatic rf185c firmware (< 2.2) • siemens simatic rf166c firmware (< 2.2)

Related

Weakness · CWE (1)

  • CWE-912 Hidden Functionality weakness

References