支持本站 — 捐款将帮助我们持续运营

目标: 1000 元，已筹: 1000 元

100.0%
立即捐款
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2024-41797 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

漏洞
N/A
来源: 美国国家漏洞数据库 NVD
漏洞信息
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 (6GK5328-4TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2) (All versions < V3.1), SCALANCE XC332 (6GK5332-0GA00-2AC2) (All versions < V3.1), SCALANCE XC416-8 (6GK5424-8TR00-2AC2) (All versions < V3.1), SCALANCE XC424-4 (6GK5428-4TR00-2AC2) (All versions < V3.1), SCALANCE XC432 (6GK5432-0GR00-2AC2) (All versions < V3.1), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.1), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.1), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.1), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-2AR3) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-3AR3) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-4AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-2AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-3AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-4AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-2AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-3AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-4AR3) (All versions < V3.1), SCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-2AR3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-3AR3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-4AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-2AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-3AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-4AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-2AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-3AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-4AR3) (All versions < V3.1), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.1), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.1), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.1), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.1). Affected devices contain an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with "guest" role to invoke an internal "do system" command which exceeds their privileges. This command allows the execution of certain low-risk actions, the most critical of which is clearing the local system log.
来源: 美国国家漏洞数据库 NVD
漏洞信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
来源: 美国国家漏洞数据库 NVD
漏洞
特权管理不恰当
来源: 美国国家漏洞数据库 NVD
漏洞
Siemens多款产品 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
漏洞信息
Siemens RUGGEDCOM RST2428P等都是加拿大Siemens公司的一款服务器通讯设备。 Siemens多款产品存在安全漏洞，该漏洞源于授权检查不当，可能导致经过身份验证的远程攻击者以guest角色执行超出权限的系统命令。以下产品和版本受到影响：RUGGEDCOM RST2428P和SCALANCE XC316-8、SCALANCE XC324-4、SCALANCE XC324-4 EEC、SCALANCE XC332、SCALANCE XC416-8、SCALANCE XC424-4、S
来源: 中国国家信息安全漏洞库 CNNVD
漏洞信息
N/A
来源: 中国国家信息安全漏洞库 CNNVD
漏洞
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
厂商产品影响版本CPE订阅
SiemensRUGGEDCOM RST2428P 0 ~ V3.1 -
SiemensSCALANCE XC316-8 0 ~ V3.1 -
SiemensSCALANCE XC324-4 0 ~ V3.1 -
SiemensSCALANCE XC324-4 EEC 0 ~ V3.1 -
SiemensSCALANCE XC332 0 ~ V3.1 -
SiemensSCALANCE XC416-8 0 ~ V3.1 -
SiemensSCALANCE XC424-4 0 ~ V3.1 -
SiemensSCALANCE XC432 0 ~ V3.1 -
SiemensSCALANCE XCH328 0 ~ V3.1 -
SiemensSCALANCE XCM324 0 ~ V3.1 -
SiemensSCALANCE XCM328 0 ~ V3.1 -
SiemensSCALANCE XCM332 0 ~ V3.1 -
SiemensSCALANCE XR302-32 0 ~ V3.1 -
SiemensSCALANCE XR302-32 0 ~ V3.1 -
SiemensSCALANCE XR302-32 0 ~ V3.1 -
SiemensSCALANCE XR322-12 0 ~ V3.1 -
SiemensSCALANCE XR322-12 0 ~ V3.1 -
SiemensSCALANCE XR322-12 0 ~ V3.1 -
SiemensSCALANCE XR326-8 0 ~ V3.1 -
SiemensSCALANCE XR326-8 0 ~ V3.1 -
SiemensSCALANCE XR326-8 0 ~ V3.1 -
SiemensSCALANCE XR326-8 EEC 0 ~ V3.1 -
SiemensSCALANCE XR502-32 0 ~ V3.1 -
SiemensSCALANCE XR502-32 0 ~ V3.1 -
SiemensSCALANCE XR502-32 0 ~ V3.1 -
SiemensSCALANCE XR522-12 0 ~ V3.1 -
SiemensSCALANCE XR522-12 0 ~ V3.1 -
SiemensSCALANCE XR522-12 0 ~ V3.1 -
SiemensSCALANCE XR526-8 0 ~ V3.1 -
SiemensSCALANCE XR526-8 0 ~ V3.1 -
SiemensSCALANCE XR526-8 0 ~ V3.1 -
SiemensSCALANCE XRH334 (24 V DC, 8xFO, CC) 0 ~ V3.1 -
SiemensSCALANCE XRM334 (230 V AC, 12xFO) 0 ~ V3.1 -
SiemensSCALANCE XRM334 (230 V AC, 8xFO) 0 ~ V3.1 -
SiemensSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) 0 ~ V3.1 -
SiemensSCALANCE XRM334 (24 V DC, 12xFO) 0 ~ V3.1 -
SiemensSCALANCE XRM334 (24 V DC, 8xFO) 0 ~ V3.1 -
SiemensSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) 0 ~ V3.1 -
SiemensSCALANCE XRM334 (2x230 V AC, 12xFO) 0 ~ V3.1 -
SiemensSCALANCE XRM334 (2x230 V AC, 8xFO) 0 ~ V3.1 -
SiemensSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) 0 ~ V3.1 -
二、漏洞 CVE-2024-41797 的公开POC
#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC
三、漏洞 CVE-2024-41797 的情报信息
第 登录 三、漏洞 %(cve_id)s 的情报信息
新漏洞
产品: RUGGEDCOM RST2428P
厂商: Siemens
Same weakness: CWE-269
四、漏洞 CVE-2024-41797 的评论

暂无评论

发表评论