CVE-2025-24499 — Improper Input Validation in Siemens Scalance Wab762-1

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 53.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Siemens Scalance Wab762-1Siemens Scalance Wam763-1Siemens Scalance Wam766-1+5 more
Timeline
PublishedFeb 11

Description

A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V3.0.0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) (All versions < V3.0.0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V3.0.0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) (All versions < V3.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V3…

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages8 packages

▶CVEListV5siemens/scalance_wam766-1< V3.0.0
▶CVEListV5siemens/scalance_wam766-1_eec< V3.0.0
▶CVEListV5siemens/scalance_wum763-1< V3.0.0
▶CVEListV5siemens/scalance_wam763-1< V3.0.0
▶CVEListV5siemens/scalance_wum766-1< V3.0.0

🔴Vulnerability Details

2
GHSA
GHSA-9hqf-2957-q2jh: A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3↗2025-02-11
▶
CVEList
CVE-2025-24499: A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3↗2025-02-11
▶
CVE-2025-24499 — Improper Input Validation in Siemens | cvebase