CVE-2024-37992
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0) (All versions < V4.2), SIMATIC Reader RF615R ETSI (6GT2811-6CC10-0AA0) (All versions < V4.2), SIMATIC Reader RF615R FCC (6GT2811-6CC10-1AA0) (All versions < V4.2), SIMATIC Reader RF650R ARIB (6GT2811-6AB20-4AA0) (All versions < V4.2), SIMATIC Reader RF650R CMIIT (6GT2811-6AB20-2AA0) (All versions < V4.2), SIMATIC Reader RF650R ETSI (6GT2811-6AB20-0AA0) (All versions < V4.2), SIMATIC Reader RF650R FCC (6GT2811-6AB20-1AA0) (All versions < V4.2), SIMATIC Reader RF680R ARIB (6GT2811-6AA10-4AA0) (All versions < V4.2), SIMATIC Reader RF680R CMIIT (6GT2811-6AA10-2AA0) (All versions < V4.2), SIMATIC Reader RF680R ETSI (6GT2811-6AA10-0AA0) (All versions < V4.2), SIMATIC Reader RF680R FCC (6GT2811-6AA10-1AA0) (All versions < V4.2), SIMATIC Reader RF685R ARIB (6GT2811-6CA10-4AA0) (All versions < V4.2), SIMATIC Reader RF685R CMIIT (6GT2811-6CA10-2AA0) (All versions < V4.2), SIMATIC Reader RF685R ETSI (6GT2811-6CA10-0AA0) (All versions < V4.2), SIMATIC Reader RF685R FCC (6GT2811-6CA10-1AA0) (All versions < V4.2), SIMATIC RF1140R (6GT2831-6CB00) (All versions < V1.1), SIMATIC RF1170R (6GT2831-6BB00) (All versions < V1.1), SIMATIC RF166C (6GT2002-0EE20) (All versions < V2.2), SIMATIC RF185C (6GT2002-0JE10) (All versions < V2.2), SIMATIC RF186C (6GT2002-0JE20) (All versions < V2.2), SIMATIC RF186CI (6GT2002-0JE50) (All versions < V2.2), SIMATIC RF188C (6GT2002-0JE40) (All versions < V2.2), SIMATIC RF188CI (6GT2002-0JE60) (All versions < V2.2), SIMATIC RF360R (6GT2801-5BA30) (All versions < V2.2). The affected devices does not properly handle the error in case of exceeding characters while setting SNMP leading to the restart of the application.
EPSS 0.24% · 47.3th percentile
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SIMATIC Reader RF610R CMIIT | 0 |
| Siemens | SIMATIC Reader RF685R CMIIT | 0 |
| Siemens | SIMATIC Reader RF680R ETSI | 0 |
| siemens | simatic_rf185c_firmware | 0 |
| siemens | simatic_reader_rf610r_fcc_firmware | 0 |
| Siemens | SIMATIC Reader RF650R CMIIT | 0 |
| Siemens | SIMATIC Reader RF610R ETSI | 0 |
| Siemens | SIMATIC RF186C | 0 |
| Siemens | SIMATIC Reader RF680R CMIIT | 0 |
| Siemens | SIMATIC RF1170R | 0 |
| siemens | simatic_rf186c_firmware | 0 |
| siemens | simatic_reader_rf685r_arib_firmware | 0 |
| Siemens | SIMATIC RF188C | 0 |
| Siemens | SIMATIC Reader RF615R CMIIT | 0 |
| Siemens | SIMATIC RF360R | 0 |
| siemens | simatic_reader_rf650r_etsi_firmware | 0 |
| Siemens | SIMATIC Reader RF685R ARIB | 0 |
| Siemens | SIMATIC Reader RF615R FCC | 0 |
| siemens | simatic_reader_rf680r_etsi_firmware | 0 |
| Siemens | SIMATIC RF188CI | 0 |
…and 34 more
Exploit Intelligence
- CIRCL seen: CVE-2024-37992 (circl-sighting)
- https://cert-portal.siemens.com/productcert/html/ssa-765405.html (circl)
Timeline
- Sep 10, 2024 CVE Published
- Sep 10, 2024 PoC Published
- Sep 11, 2024 EPSS Score
- Sep 18, 2024 CVE Updated
- Oct 1, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 21, 2024 EPSS Score
- Nov 9, 2024 EPSS Score
- Nov 29, 2024 EPSS Score
- Dec 20, 2024 EPSS Score
- Jan 9, 2025 EPSS Score
- Jan 29, 2025 EPSS Score
References
- https://cert-portal.siemens.com/productcert/html/ssa-721642.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-969738.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-673996.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-773256.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-423808.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-039007.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-629254.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-765405.html advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-37992 advisory