CVE-2025-24532

published 2025-02-11

CVE-2025-24532: A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions <…

medium 5.3 CVSS 4.0

AV N AC L AT N PR L UI N VC N VI L VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V3.0.0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) (All versions < V3.0.0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V3.0.0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) (All versions < V3.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V3.0.0), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) (All versions < V3.0.0), SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) (All versions < V3.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V3.0.0), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) (All versions < V3.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V3.0.0). Affected devices with role `user` is affected by incorrect authorization in SNMPv3 View configuration. This could allow an attacker to change the View Type of SNMPv3 Views.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
msrc	azl3_golang_1.20.2-1_on_azure_linux_3.0	—	—
msrc	azl3_golang_1.23.7-1_on_azure_linux_3.0	—	—
msrc	azl3_golang_1.23.9-1_on_azure_linux_3.0	—	—
msrc	azl3_golang_1.24.3-1_on_azure_linux_3.0	—	—
msrc	cbl2_golang_1.17.13-2_on_cbl_mariner_2.0	—	—
msrc	cbl2_golang_1.18.8-7_on_cbl_mariner_2.0	—	—
msrc	cbl2_golang_1.21.6-1_on_cbl_mariner_2.0	—	—
siemens	scalance_wab762-1	< V3.0.0	V3.0.0
siemens	scalance_wam763-1	< V3.0.0	V3.0.0
siemens	scalance_wam766-1	< V3.0.0	V3.0.0
siemens	scalance_wam766-1_eec	< V3.0.0	V3.0.0
siemens	scalance_wub762-1	< V3.0.0	V3.0.0
siemens	scalance_wub762-1_ifeatures	< V3.0.0	V3.0.0
siemens	scalance_wum763-1	< V3.0.0	V3.0.0
siemens	scalance_wum766-1	< V3.0.0	V3.0.0

CWE-284 CWE-682