Details of VAR-202409-0241

ID

VAR-202409-0241

CVE

CVE-2024-37992

TITLE

Vulnerabilities in multiple Siemens products

Trust: 0.8

sources: JVNDB: JVNDB-2024-008454

DESCRIPTION

A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0) (All versions < V4.2), SIMATIC Reader RF615R ETSI (6GT2811-6CC10-0AA0) (All versions < V4.2), SIMATIC Reader RF615R FCC (6GT2811-6CC10-1AA0) (All versions < V4.2), SIMATIC Reader RF650R ARIB (6GT2811-6AB20-4AA0) (All versions < V4.2), SIMATIC Reader RF650R CMIIT (6GT2811-6AB20-2AA0) (All versions < V4.2), SIMATIC Reader RF650R ETSI (6GT2811-6AB20-0AA0) (All versions < V4.2), SIMATIC Reader RF650R FCC (6GT2811-6AB20-1AA0) (All versions < V4.2), SIMATIC Reader RF680R ARIB (6GT2811-6AA10-4AA0) (All versions < V4.2), SIMATIC Reader RF680R CMIIT (6GT2811-6AA10-2AA0) (All versions < V4.2), SIMATIC Reader RF680R ETSI (6GT2811-6AA10-0AA0) (All versions < V4.2), SIMATIC Reader RF680R FCC (6GT2811-6AA10-1AA0) (All versions < V4.2), SIMATIC Reader RF685R ARIB (6GT2811-6CA10-4AA0) (All versions < V4.2), SIMATIC Reader RF685R CMIIT (6GT2811-6CA10-2AA0) (All versions < V4.2), SIMATIC Reader RF685R ETSI (6GT2811-6CA10-0AA0) (All versions < V4.2), SIMATIC Reader RF685R FCC (6GT2811-6CA10-1AA0) (All versions < V4.2), SIMATIC RF1140R (6GT2831-6CB00) (All versions < V1.1), SIMATIC RF1170R (6GT2831-6BB00) (All versions < V1.1), SIMATIC RF166C (6GT2002-0EE20) (All versions < V2.2), SIMATIC RF185C (6GT2002-0JE10) (All versions < V2.2), SIMATIC RF186C (6GT2002-0JE20) (All versions < V2.2), SIMATIC RF186CI (6GT2002-0JE50) (All versions < V2.2), SIMATIC RF188C (6GT2002-0JE40) (All versions < V2.2), SIMATIC RF188CI (6GT2002-0JE60) (All versions < V2.2), SIMATIC RF360R (6GT2801-5BA30) (All versions < V2.2). The affected devices does not properly handle the error in case of exceeding characters while setting SNMP leading to the restart of the application. SIMATIC RF360R firmware, simatic rf1170r firmware, simatic rf1140r Multiple Siemens products such as firmware have unspecified vulnerabilities.Service operation interruption (DoS) It may be in a state. SIMATIC RF600 Readers are used for contactless identification of various objects, such as transport containers, pallets, production goods or generally for recording bulk goods. SIMATIC RF1100 is an RFID-based solution for simple and universal electronic authorization management. The SIMATIC RF360R reader expands the SIMATIC RFID300 RFID system with a compact reader with an integrated Industrial Ethernet interface. Siemens SIMATIC RFID Readers have a mishandling vulnerability that can be exploited by an attacker to cause the application to restart

Trust: 2.16

sources: NVD: CVE-2024-37992 // JVNDB: JVNDB-2024-008454 // CNVD: CNVD-2024-38009

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2024-38009

AFFECTED PRODUCTS

vendor:	siemens	model:	simatic rf166c	scope:	lt	version:	2.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf650r fcc	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf685r fcc	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf685r cmiit	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf680r cmiit	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf650r arib	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic rf1170r	scope:	lt	version:	1.1	Trust: 1.0
vendor:	siemens	model:	simatic reader rf615r cmiit	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic rf188ci	scope:	lt	version:	2.2	Trust: 1.0
vendor:	siemens	model:	simatic rf1140r	scope:	lt	version:	1.1	Trust: 1.0
vendor:	siemens	model:	simatic rf188c	scope:	lt	version:	2.2	Trust: 1.0
vendor:	siemens	model:	simatic rf186ci	scope:	lt	version:	2.2	Trust: 1.0
vendor:	siemens	model:	simatic rf186c	scope:	lt	version:	2.2	Trust: 1.0
vendor:	siemens	model:	simatic rf185c	scope:	lt	version:	2.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf680r arib	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf650r etsi	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf610r etsi	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf650r cmiit	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic rf360r	scope:	lt	version:	2.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf615r etsi	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf610r cmiit	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf680r fcc	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf685r etsi	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf615r fcc	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf680r etsi	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf610r fcc	scope:	lt	version:	4.2	Trust: 1.0
vendor:	siemens	model:	simatic reader rf685r arib	scope:	lt	version:	4.2	Trust: 1.0
vendor:	シーメンス	model:	simatic reader rf650r arib	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf650r etsi	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf685r etsi	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf615r fcc	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf610r etsi	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf610r fcc	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf650r fcc	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic rf1140r	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic rf1170r	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic rf360r	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf615r etsi	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf680r arib	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf685r arib	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf615r cmiit	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf680r cmiit	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf680r etsi	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf685r fcc	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf650r cmiit	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf680r fcc	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	simatic reader rf685r cmiit	scope:	-	version:	-	Trust: 0.8
vendor:	siemens	model:	simatic rf166c	scope:	lt	version:	v2.2	Trust: 0.6
vendor:	siemens	model:	simatic rf185c	scope:	lt	version:	v2.2	Trust: 0.6
vendor:	siemens	model:	simatic rf186c	scope:	lt	version:	v2.2	Trust: 0.6
vendor:	siemens	model:	simatic rf186ci	scope:	lt	version:	v2.2	Trust: 0.6
vendor:	siemens	model:	simatic rf188c	scope:	lt	version:	v2.2	Trust: 0.6
vendor:	siemens	model:	simatic rf188ci	scope:	lt	version:	v2.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf610r cmiit	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf610r etsi	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf610r fcc	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf615r cmiit	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf615r etsi	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf615r fcc	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf650r arib	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf650r cmiit	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf650r etsi	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf650r fcc	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf680r arib	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf680r cmiit	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf680r etsi	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf680r fcc	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf685r arib	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf685r cmiit	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf685r etsi	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic reader rf685r fcc	scope:	lt	version:	v4.2	Trust: 0.6
vendor:	siemens	model:	simatic rf1140r	scope:	lt	version:	v1.1	Trust: 0.6
vendor:	siemens	model:	simatic rf1170r	scope:	lt	version:	v1.1	Trust: 0.6
vendor:	siemens	model:	simatic rf360r	scope:	lt	version:	v2.2	Trust: 0.6

sources: CNVD: CNVD-2024-38009 // JVNDB: JVNDB-2024-008454 // NVD: CVE-2024-37992

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2024-37992
value:	HIGH
Trust: 1.0
productcert@siemens.com:	CVE-2024-37992
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2024-37992
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2024-38009
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2024-38009
severity:	MEDIUM
baseScore:	6.1
vectorString:	AV:N/AC:L/AU:M/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	MULTIPLE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.4
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2024-37992
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.1
Trust: 1.0
productcert@siemens.com:	CVE-2024-37992
baseSeverity:	MEDIUM
baseScore:	4.9
vectorString:	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	1.2
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	CVE-2024-37992
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2024-38009 // JVNDB: JVNDB-2024-008454 // NVD: CVE-2024-37992 // NVD: CVE-2024-37992

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	CWE-703	Trust: 1.0
problemtype:	Improper checks or handling of exceptional circumstances (CWE-703) [ others ]	Trust: 0.8
problemtype:	Lack of information (CWE-noinfo) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2024-008454 // NVD: CVE-2024-37992

PATCH

title:

Patch for Siemens SIMATIC RFID Readers Improper Handling Vulnerability

url:

https://www.cnvd.org.cn/patchInfo/show/590356

Trust: 0.6

sources: CNVD: CNVD-2024-38009

EXTERNAL IDS

db:	NVD	id:	CVE-2024-37992	Trust: 3.2
db:	SIEMENS	id:	SSA-765405	Trust: 2.4
db:	JVN	id:	JVNVU90825867	Trust: 0.8
db:	ICS CERT	id:	ICSA-24-256-07	Trust: 0.8
db:	JVNDB	id:	JVNDB-2024-008454	Trust: 0.8
db:	CNVD	id:	CNVD-2024-38009	Trust: 0.6

sources: CNVD: CNVD-2024-38009 // JVNDB: JVNDB-2024-008454 // NVD: CVE-2024-37992

REFERENCES

url:	https://cert-portal.siemens.com/productcert/html/ssa-765405.html	Trust: 2.4
url:	https://jvn.jp/vu/jvnvu90825867/	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2024-37992	Trust: 0.8
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-07	Trust: 0.8

sources: CNVD: CNVD-2024-38009 // JVNDB: JVNDB-2024-008454 // NVD: CVE-2024-37992

SOURCES

db:	CNVD	id:	CNVD-2024-38009
db:	JVNDB	id:	JVNDB-2024-008454
db:	NVD	id:	CVE-2024-37992

LAST UPDATE DATE

2024-09-20T22:21:04.422000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2024-38009	date:	2024-09-12T00:00:00
db:	JVNDB	id:	JVNDB-2024-008454	date:	2024-09-19T07:54:00
db:	NVD	id:	CVE-2024-37992	date:	2024-09-18T15:31:27.597

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2024-38009	date:	2024-09-13T00:00:00
db:	JVNDB	id:	JVNDB-2024-008454	date:	2024-09-19T00:00:00
db:	NVD	id:	CVE-2024-37992	date:	2024-09-10T10:15:10.837