CVE-2022-31765

published 2022-10-11

CVE-2022-31765: Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

Affected devices do not properly authorize the change password function of the web interface.
This could allow low privileged users to escalate their privileges.

Affected

109 ranges · showing 25

Vendor	Product	Version range	Fixed in
siemens	6gk5804-0ap00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5812-1aa00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5812-1ba00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5816-1aa00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5816-1ba00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5826-2ab00-2ab2_firmware	< 7.1.2	7.1.2
siemens	6gk5853-2ea00-2da1_firmware	< 7.1.2	7.1.2
siemens	6gk5856-2ea00-3aa1_firmware	< 7.1.2	7.1.2
siemens	6gk5856-2ea00-3da1_firmware	< 7.1.2	7.1.2
siemens	6gk5874-2aa00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5874-3aa00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5876-3aa02-2ba2_firmware	< 7.1.2	7.1.2
siemens	6gk5876-3aa02-2ea2_firmware	< 7.1.2	7.1.2
siemens	6gk5876-4aa00-2ba2_firmware	< 7.1.2	7.1.2
siemens	6gk5876-4aa00-2da2_firmware	< 7.1.2	7.1.2
siemens	6gk6108-4am00-2ba2_firmware	< 7.1.2	7.1.2
siemens	6gk6108-4am00-2da2_firmware	< 7.1.2	7.1.2
siemens	ruggedcom_rm1224_lte_eu	< V7.1.2	V7.1.2
siemens	ruggedcom_rm1224_lte_nam	< V7.1.2	V7.1.2
siemens	scalance_m804pb	< V7.1.2	V7.1.2
siemens	scalance_m812-1_adsl-router	< V7.1.2	V7.1.2
siemens	scalance_m816-1_adsl-router	< V7.1.2	V7.1.2
siemens	scalance_m826-2_shdsl-router	< V7.1.2	V7.1.2
siemens	scalance_m874-2	< V7.1.2	V7.1.2
siemens	scalance_m874-3	< V7.1.2	V7.1.2

CWE-862