9.8

CVE-2023-24845

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM M969NC, RUGGEDCOM RMC30, RUGGEDCOM RMC30NC, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RMC8388NC V4.X, RUGGEDCOM RMC8388NC V5.X, RUGGEDCOM RP110, RUGGEDCOM RP110NC, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600FNC, RUGGEDCOM RS1600NC, RUGGEDCOM RS1600T, RUGGEDCOM RS1600TNC, RUGGEDCOM RS400, RUGGEDCOM RS400F, RUGGEDCOM RS400NC, RUGGEDCOM RS401, RUGGEDCOM RS401NC, RUGGEDCOM RS416, RUGGEDCOM RS416F, RUGGEDCOM RS416NC, RUGGEDCOM RS416NCv2 V4.X, RUGGEDCOM RS416NCv2 V5.X, RUGGEDCOM RS416P, RUGGEDCOM RS416PF, RUGGEDCOM RS416PNC, RUGGEDCOM RS416PNCv2 V4.X, RUGGEDCOM RS416PNCv2 V5.X, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000ANC, RUGGEDCOM RS8000H, RUGGEDCOM RS8000HNC, RUGGEDCOM RS8000NC, RUGGEDCOM RS8000T, RUGGEDCOM RS8000TNC, RUGGEDCOM RS900, RUGGEDCOM RS900, RUGGEDCOM RS900 (32M) V4.X, RUGGEDCOM RS900 (32M) V5.X, RUGGEDCOM RS900F, RUGGEDCOM RS900G, RUGGEDCOM RS900G (32M) V4.X, RUGGEDCOM RS900G (32M) V5.X, RUGGEDCOM RS900GF, RUGGEDCOM RS900GNC, RUGGEDCOM RS900GNC(32M) V4.X, RUGGEDCOM RS900GNC(32M) V5.X, RUGGEDCOM RS900GP, RUGGEDCOM RS900GPF, RUGGEDCOM RS900GPNC, RUGGEDCOM RS900L, RUGGEDCOM RS900L, RUGGEDCOM RS900LNC, RUGGEDCOM RS900LNC, RUGGEDCOM RS900M-GETS-C01, RUGGEDCOM RS900M-GETS-XX, RUGGEDCOM RS900M-STND-C01, RUGGEDCOM RS900M-STND-XX, RUGGEDCOM RS900MNC-GETS-C01, RUGGEDCOM RS900MNC-GETS-XX, RUGGEDCOM RS900MNC-STND-XX, RUGGEDCOM RS900MNC-STND-XX-C01, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC(32M) V4.X, RUGGEDCOM RS900NC(32M) V5.X, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910LNC, RUGGEDCOM RS910NC, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920LNC, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930LNC, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS940GF, RUGGEDCOM RS940GNC, RUGGEDCOM RS969, RUGGEDCOM RS969NC, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100F, RUGGEDCOM RSG2100NC, RUGGEDCOM RSG2100NC(32M) V4.X, RUGGEDCOM RSG2100NC(32M) V5.X, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2100PF, RUGGEDCOM RSG2100PNC, RUGGEDCOM RSG2100PNC (32M) V4.X, RUGGEDCOM RSG2100PNC (32M) V5.X, RUGGEDCOM RSG2200, RUGGEDCOM RSG2200F, RUGGEDCOM RSG2200NC, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2288NC V4.X, RUGGEDCOM RSG2288NC V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300F, RUGGEDCOM RSG2300NC V4.X, RUGGEDCOM RSG2300NC V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PF, RUGGEDCOM RSG2300PNC V4.X, RUGGEDCOM RSG2300PNC V5.X, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG2488F, RUGGEDCOM RSG2488NC V4.X, RUGGEDCOM RSG2488NC V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSG920PNC V4.X, RUGGEDCOM RSG920PNC V5.X, RUGGEDCOM RSL910, RUGGEDCOM RSL910NC, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P. The affected products insufficiently block data from being forwarded over the mirror port into the mirrored network.

An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.

Data is provided by the National Vulnerability Database (NVD)
SiemensRuggedcom Ros Version < 4.3.8
   SiemensRuggedcom I800 Version-
   SiemensRuggedcom I800nc Version-
   SiemensRuggedcom I801 Version-
   SiemensRuggedcom I801nc Version-
   SiemensRuggedcom I802 Version-
   SiemensRuggedcom I802nc Version-
   SiemensRuggedcom I803 Version-
   SiemensRuggedcom I803nc Version-
   SiemensRuggedcom M2100 Version-
   SiemensRuggedcom M2100nc Version-
   SiemensRuggedcom M2200 Version-
   SiemensRuggedcom M2200nc Version-
   SiemensRuggedcom M969 Version-
   SiemensRuggedcom M969nc Version-
   SiemensRuggedcom Rmc30 Version-
   SiemensRuggedcom Rmc30nc Version-
   SiemensRuggedcom Rp110 Version-
   SiemensRuggedcom Rp110nc Version-
   SiemensRuggedcom Rs1600 Version-
   SiemensRuggedcom Rs1600f Version-
   SiemensRuggedcom Rs1600fnc Version-
   SiemensRuggedcom Rs1600nc Version-
   SiemensRuggedcom Rs1600t Version-
   SiemensRuggedcom Rs1600tnc Version-
   SiemensRuggedcom Rs400 Version-
   SiemensRuggedcom Rs400nc Version-
   SiemensRuggedcom Rs401 Version-
   SiemensRuggedcom Rs401nc Version-
   SiemensRuggedcom Rs416 Version-
   SiemensRuggedcom Rs416nc Version-
   SiemensRuggedcom Rs416p Version-
   SiemensRuggedcom Rs416pnc Version-
   SiemensRuggedcom Rs8000 Version-
   SiemensRuggedcom Rs8000a Version-
   SiemensRuggedcom Rs8000anc Version-
   SiemensRuggedcom Rs8000h Version-
   SiemensRuggedcom Rs8000hnc Version-
   SiemensRuggedcom Rs8000nc Version-
   SiemensRuggedcom Rs8000t Version-
   SiemensRuggedcom Rs8000tnc Version-
   SiemensRuggedcom Rs900 Version-
   SiemensRuggedcom Rs900g Version-
   SiemensRuggedcom Rs900gnc Version-
   SiemensRuggedcom Rs900gp Version-
   SiemensRuggedcom Rs900gpnc Version-
   SiemensRuggedcom Rs900l Version-
   SiemensRuggedcom Rs900lnc Version-
   SiemensRuggedcom Rs900m-gets-c01 Version-
   SiemensRuggedcom Rs900m-gets-xx Version-
   SiemensRuggedcom Rs900m-stnd-c01 Version-
   SiemensRuggedcom Rs900m-stnd-xx Version-
   SiemensRuggedcom Rs900mnc-gets-c01 Version-
   SiemensRuggedcom Rs900mnc-gets-xx Version-
   SiemensRuggedcom Rs900mnc-stnd-xx Version-
   SiemensRuggedcom Rs900mnc-stnd-xx-c01 Version-
   SiemensRuggedcom Rs900nc Version-
   SiemensRuggedcom Rs900w Version-
   SiemensRuggedcom Rs910 Version-
   SiemensRuggedcom Rs910l Version-
   SiemensRuggedcom Rs910lnc Version-
   SiemensRuggedcom Rs910nc Version-
   SiemensRuggedcom Rs910w Version-
   SiemensRuggedcom Rs920l Version-
   SiemensRuggedcom Rs920lnc Version-
   SiemensRuggedcom Rs920w Version-
   SiemensRuggedcom Rs930l Version-
   SiemensRuggedcom Rs930lnc Version-
   SiemensRuggedcom Rs930w Version-
   SiemensRuggedcom Rs940g Version-
   SiemensRuggedcom Rs940gnc Version-
   SiemensRuggedcom Rs969 Version-
   SiemensRuggedcom Rs969nc Version-
   SiemensRuggedcom Rsg2100 Version-
   SiemensRuggedcom Rsg2100nc Version-
   SiemensRuggedcom Rsg2100p Version-
   SiemensRuggedcom Rsg2100pnc Version-
   SiemensRuggedcom Rsg2200 Version-
   SiemensRuggedcom Rsg2200nc Version-
SiemensRuggedcom Ros Version >= 4.0.0 < 4.3.8
   SiemensRuggedcom Rmc8388 Version-
   SiemensRuggedcom Rmc8388nc Version-
   SiemensRuggedcom Rsg2288 Version-
   SiemensRuggedcom Rsg2288nc Version-
   SiemensRuggedcom Rsg2300 Version-
   SiemensRuggedcom Rsg2300nc Version-
   SiemensRuggedcom Rsg2300p Version-
   SiemensRuggedcom Rsg2300pnc Version-
   SiemensRuggedcom Rsg2488 Version-
   SiemensRuggedcom Rsg2488nc Version-
   SiemensRuggedcom Rsg920p Version-
   SiemensRuggedcom Rsg920pnc Version-
SiemensRuggedcom Ros Version >= 5.0.0
   SiemensRuggedcom Rmc8388 Version-
   SiemensRuggedcom Rmc8388nc Version-
   SiemensRuggedcom Rsg2288 Version-
   SiemensRuggedcom Rsg2288nc Version-
   SiemensRuggedcom Rsg2300 Version-
   SiemensRuggedcom Rsg2300nc Version-
   SiemensRuggedcom Rsg2300p Version-
   SiemensRuggedcom Rsg2300pnc Version-
   SiemensRuggedcom Rsg2488 Version-
   SiemensRuggedcom Rsg2488nc Version-
   SiemensRuggedcom Rsg920p Version-
   SiemensRuggedcom Rsg920pnc Version-
SiemensRuggedcom Ros
   SiemensRuggedcom M2100f Version-
   SiemensRuggedcom M2200f Version-
   SiemensRuggedcom M969f Version-
   SiemensRuggedcom Rs400f Version-
   SiemensRuggedcom Rs416f Version-
   SiemensRuggedcom Rs416nc V2 Version-
   SiemensRuggedcom Rs416pf Version-
   SiemensRuggedcom Rs416pnc V2 Version-
   SiemensRuggedcom Rs416pv2 Version-
   SiemensRuggedcom Rs416v2 Version-
   SiemensRuggedcom Rs900f Version-
   SiemensRuggedcom Rs900gf Version-
   SiemensRuggedcom Rs900gpf Version-
   SiemensRuggedcom Rs940gf Version-
   SiemensRuggedcom Rsg2100f Version-
   SiemensRuggedcom Rsg2100pf Version-
   SiemensRuggedcom Rsg2200f Version-
   SiemensRuggedcom Rsg2300f Version-
   SiemensRuggedcom Rsg2300pf Version-
   SiemensRuggedcom Rsg2488f Version-
   SiemensRuggedcom Rsg907r Version-
   SiemensRuggedcom Rsg908c Version-
   SiemensRuggedcom Rsg909r Version-
   SiemensRuggedcom Rsg910c Version-
   SiemensRuggedcom Rsl910 Version-
   SiemensRuggedcom Rsl910nc Version-
   SiemensRuggedcom Rst2228 Version-
   SiemensRuggedcom Rst2228p Version-
   SiemensRuggedcom Rst916c Version-
   SiemensRuggedcom Rst916p Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.23% 0.453
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
productcert@siemens.com 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CWE-684 Incorrect Provision of Specified Functionality

The code does not function according to its published specifications, potentially leading to incorrect usage.