CVE-2022-31765

published 2022-10-11

CVE-2022-31765: Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their…

Priority P3 54 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

Affected devices do not properly authorize the change password function of the web interface.
This could allow low privileged users to escalate their privileges.

Affected

109 ranges · showing 25

Vendor	Product	Version range	Fixed in
siemens	6gk5804-0ap00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5812-1aa00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5812-1ba00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5816-1aa00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5816-1ba00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5826-2ab00-2ab2_firmware	< 7.1.2	7.1.2
siemens	6gk5853-2ea00-2da1_firmware	< 7.1.2	7.1.2
siemens	6gk5856-2ea00-3aa1_firmware	< 7.1.2	7.1.2
siemens	6gk5856-2ea00-3da1_firmware	< 7.1.2	7.1.2
siemens	6gk5874-2aa00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5874-3aa00-2aa2_firmware	< 7.1.2	7.1.2
siemens	6gk5876-3aa02-2ba2_firmware	< 7.1.2	7.1.2
siemens	6gk5876-3aa02-2ea2_firmware	< 7.1.2	7.1.2
siemens	6gk5876-4aa00-2ba2_firmware	< 7.1.2	7.1.2
siemens	6gk5876-4aa00-2da2_firmware	< 7.1.2	7.1.2
siemens	6gk6108-4am00-2ba2_firmware	< 7.1.2	7.1.2
siemens	6gk6108-4am00-2da2_firmware	< 7.1.2	7.1.2
siemens	ruggedcom_rm1224_lte_eu	< V7.1.2	V7.1.2
siemens	ruggedcom_rm1224_lte_nam	< V7.1.2	V7.1.2
siemens	scalance_m804pb	< V7.1.2	V7.1.2
siemens	scalance_m812-1_adsl-router	< V7.1.2	V7.1.2
siemens	scalance_m816-1_adsl-router	< V7.1.2	V7.1.2
siemens	scalance_m826-2_shdsl-router	< V7.1.2	V7.1.2
siemens	scalance_m874-2	< V7.1.2	V7.1.2
siemens	scalance_m874-3	< V7.1.2	V7.1.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-862