6.3

CVE-2025-23384

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.2.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.2.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2.1), SCALANCE MUB852-1 (A1) (6GK5852-1EA10-1AA1) (All versions < V8.2.1), SCALANCE MUB852-1 (B1) (6GK5852-1EA10-1BA1) (All versions < V8.2.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2.1), SCALANCE SC-600 family (All versions). Affected devices improperly validate usernames during OpenVPN authentication. This could allow an attacker to get partial invalid usernames accepted by the server.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorSiemens
≫
Product RUGGEDCOM RM1224 LTE(4G) EU
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product RUGGEDCOM RM1224 LTE(4G) NAM
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE M804PB
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE M812-1 ADSL-Router family
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE M816-1 ADSL-Router family
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE M826-2 SHDSL-Router
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE M874-2
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE M874-3
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE M874-3 3G-Router (CN)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE M876-3
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE M876-3 (ROK)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE M876-4
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE M876-4 (EU)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE M876-4 (NAM)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE MUB852-1 (A1)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE MUB852-1 (B1)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE MUM853-1 (A1)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE MUM853-1 (B1)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE MUM853-1 (EU)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE MUM856-1 (A1)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE MUM856-1 (B1)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE MUM856-1 (CN)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE MUM856-1 (EU)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE MUM856-1 (RoW)
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE S615 EEC LAN-Router
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE S615 LAN-Router
Default Statusunknown
Version < V8.2.1
Version 0
Status affected
VendorSiemens
≫
Product SCALANCE SC-600 family
Default Statusunknown
Version < *
Version 0
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.178
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
productcert@siemens.com 3.7 2.2 1.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
productcert@siemens.com 6.3 0 0
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-187 Partial String Comparison

The product performs a comparison that only examines a portion of a factor before determining whether there is a match, such as a substring, leading to resultant weaknesses.