CVE-2022-31766

published 2022-10-11

CVE-2022-31766: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 =…

high 8.6 CVSS 3.1

AV N AC L PR N UI N S C C N I N A H

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 < V3.0.0). Affected devices with TCP Event service enabled do not properly handle malformed packets.
This could allow an unauthenticated remote attacker to cause a denial of service condition and reboot the device thus possibly affecting other network resources.

Affected

35 ranges · showing 25

Vendor	Product	Version range	Fixed in
siemens	ruggedcom_rm1224_firmware	< 7.1.2	7.1.2
siemens	ruggedcom_rm1224_lte_eu	< V7.1.2	V7.1.2
siemens	ruggedcom_rm1224_lte_nam	< V7.1.2	V7.1.2
siemens	scalance_m804pb	< V7.1.2	V7.1.2
siemens	scalance_m804pb_firmware	< 7.1.2	7.1.2
siemens	scalance_m812-1_adsl-router	< V7.1.2	V7.1.2
siemens	scalance_m812-1_firmware	< 7.1.2	7.1.2
siemens	scalance_m816-1_adsl-router	< V7.1.2	V7.1.2
siemens	scalance_m816-1_firmware	< 7.1.2	7.1.2
siemens	scalance_m826-2_firmware	< 7.1.2	7.1.2
siemens	scalance_m826-2_shdsl-router	< V7.1.2	V7.1.2
siemens	scalance_m874-2	< V7.1.2	V7.1.2
siemens	scalance_m874-2_firmware	< 7.1.2	7.1.2
siemens	scalance_m874-3	< V7.1.2	V7.1.2
siemens	scalance_m874-3_firmware	< 7.1.2	7.1.2
siemens	scalance_m876-3	< V7.1.2	V7.1.2
siemens	scalance_m876-3_firmware	< 7.1.2	7.1.2
siemens	scalance_m876-4	< V7.1.2	V7.1.2
siemens	scalance_m876-4_firmware	< 7.1.2	7.1.2
siemens	scalance_mum853-1	< V7.1.2	V7.1.2
siemens	scalance_mum853-1_firmware	< 7.1.2	7.1.2
siemens	scalance_mum856-1	< V7.1.2	V7.1.2
siemens	scalance_mum856-1_firmware	< 7.1.2	7.1.2
siemens	scalance_s615_eec_lan-router	< V7.1.2	V7.1.2
siemens	scalance_s615_firmware	< 7.1.2	7.1.2

CWE-20