Siemens 6gk5205-3bb00-2ab2 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens 6gk5205-3bb00-2ab2 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2023-44373 — CVSS 9.1 (critical): Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges…
• CVE-2022-31765 — CVSS 8.8 (high): Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to…
• CVE-2023-44374 — CVSS 6.5 (medium): A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM…
• CVE-2023-44319 — CVSS 4.9 (medium): A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM…
• CVE-2023-44318 — CVSS 4.9 (medium): Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could…
• CVE-2023-44320 — CVSS 4.3 (medium): A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G)…
• CVE-2023-44322 — CVSS 3.7 (low): A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM…
• CVE-2023-44321 — CVSS 2.7 (low): Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing…