CVE-2023-44373
A vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.
- Record
CVE-2023-44373- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H - CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C - Weakness
- CWE-74
- Updated
- 2026-11-02
EUVDEUVD-2023-48727
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.
- Record
EUVD-2023-48727- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-86gv-6g4q-x856
A vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...
A vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE XB205-3 (ST, E/IP) (All versions < V4.5), SCALANCE XB205-3 (ST, E/IP) (All versions < V4.5), SCALANCE XB205-3 (ST, PN) (All versions < V4.5), SCALANCE XB205-3LD (SC, E/IP) (All versions < V4.5), SCALANCE XB205-3LD (SC, PN) (All versions < V4.5), SCALANCE XB208 (E/IP) (All versions < V4.5), SCALANCE XB208 (PN) (All versions < V4.5), SCALANCE XB213-3 (SC, E/IP) (All versions < V4.5), SCALANCE XB213-3 (SC, PN) (All versions < V4.5), SCALANCE XB213-3 (ST, E/IP) (All versions < V4.5), SCALANCE XB213-3 (ST, PN) (All versions < V4.5), SCALANCE XB213-3LD (SC, E/IP) (All versions < V4.5), SCALANCE XB213-3LD (SC, PN) (All versions < V4.5), SCALANCE XB216 (E/IP) (All versions < V4.5), SCALANCE XB216 (PN) (All versions < V4.5), SCALANCE XC206-2 (SC) (All versions < V4.5), SCALANCE XC206-2 (ST/BFOC) (All versions < V4.5), SCALANCE XC206-2G PoE (All versions < V4.5), SCALANCE XC206-2G PoE (54 V DC) (All versions < V4.5), SCALANCE XC206-2G PoE EEC (54 V DC) (All versions < V4.5), SCALANCE XC206-2SFP (All versions < V4.5), SCALANCE XC206-2SFP EEC (All versions < V4.5), SCALANCE XC206-2SFP G (All versions < V4.5), SCALANCE XC206-2SFP G (EIP DEF.) (All versions < V4.5), SCALANCE XC206-2SFP G EEC (All versions < V4.5), SCALANCE XC208 (All versions < V4.5), SCALANCE XC208EEC (All versions < V4.5), SCALANCE XC208G (All versions < V4.5), SCALANCE XC208G (EIP def.) (All versions < V4.5), SCALANCE XC208G EEC (All versions < V4.5), SCALANCE XC208G PoE (All versions < V4.5), SCALANCE XC208G PoE (54 V DC) (All versions < V4.5), SCALANCE XC216 (All versions < V4.5), SCALANCE XC216-3G PoE (All versions < V4.5), SCALANCE XC216-3G PoE (54 V DC) (All versions < V4.5), SCALANCE XC216-4C (All versions < V4.5), SCALANCE XC216-4C G (All versions < V4.5), SCALANCE XC216-4C G (EIP Def.) (All versions < V4.5), SCALANCE XC216-4C G EEC (All versions < V4.5), SCALANCE XC216EEC (All versions < V4.5), SCALANCE XC224 (All versions < V4.5), SCALANCE XC224-4C G (All versions < V4.5), SCALANCE XC224-4C G (EIP Def.) (All versions < V4.5), SCALANCE XC224-4C G EEC (All versions < V4.5), SCALANCE XF204 (All versions < V4.5), SCALANCE XF204 DNA (All versions < V4.5), SCALANCE XF204-2BA (All versions < V4.5), SCALANCE XF204-2BA DNA (All versions < V4.5), SCALANCE XP208 (All versions < V4.5), SCALANCE XP208 (Ethernet/IP) (All versions < V4.5), SCALANCE XP208EEC (All versions < V4.5), SCALANCE XP208PoE EEC (All versions < V4.5), SCALANCE XP216 (All versions < V4.5), SCALANCE XP216 (Ethernet/IP) (All versions < V4.5), SCALANCE XP216EEC (All versions < V4.5), SCALANCE XP216POE EEC (All versions < V4.5), SCALANCE XR324WG (24 x FE, AC 230V) (All versions < V4.5), SCALANCE XR324WG (24 X FE, DC 24V) (All versions < V4.5), SCALANCE XR326-2C PoE WG (All versions < V4.5), SCALANCE XR326-2C PoE WG (without UL) (All versions < V4.5), SCALANCE XR328-4C WG (24XFE, 4XGE, 24V) (All versions < V4.5), SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V) (All versions < V4.5), SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) (All versions < V4.5), SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) (All versions < V4.5), SCALANCE XR328-4C WG (28xGE, AC 230V) (All versions < V4.5), SCALANCE XR328-4C WG (28xGE, DC 24V) (All versions < V4.5), SIPLUS NET SCALANCE XC206-2 (All versions < V4.5), SIPLUS NET SCALANCE XC206-2SFP (All versions < V4.5), SIPLUS NET SCALANCE XC208 (All versions < V4.5), SIPLUS NET SCALANCE XC216-4C (All versions < V4.5). Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.
- Record
GHSA-86gv-6g4q-x856- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-74
- Updated
- 2026-11-02
NVD
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.
- Record
CVE-2023-44373- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-74
- Updated
- 2026-11-02
Affected products
- siemens 6ag1206-2bb00-7ac2 firmware
- siemens 6ag1206-2bs00-7ac2 firmware
- siemens 6ag1208-0ba00-7ac2 firmware
- siemens 6ag1216-4bs00-7ac2 firmware
- siemens 6gk5204-0ba00-2gf2 firmware
- siemens 6gk5204-0ba00-2yf2 firmware
- siemens 6gk5204-2aa00-2gf2 firmware
- siemens 6gk5204-2aa00-2yf2 firmware
- siemens 6gk5205-3bb00-2ab2 firmware
- siemens 6gk5205-3bb00-2tb2 firmware
- siemens 6gk5205-3bd00-2ab2 firmware
- siemens 6gk5205-3bd00-2tb2 firmware
Show 117 moreShow less
- siemens 6gk5205-3bf00-2ab2 firmware
- siemens 6gk5205-3bf00-2tb2 firmware
- siemens 6gk5206-2bb00-2ac2 firmware
- siemens 6gk5206-2bd00-2ac2 firmware
- siemens 6gk5206-2bs00-2ac2 firmware
- siemens 6gk5206-2bs00-2fc2 firmware
- siemens 6gk5206-2gs00-2ac2 firmware
- siemens 6gk5206-2gs00-2fc2 firmware
- siemens 6gk5206-2gs00-2tc2 firmware
- siemens 6gk5206-2rs00-2ac2 firmware
- siemens 6gk5206-2rs00-5ac2 firmware
- siemens 6gk5206-2rs00-5fc2 firmware
- siemens 6gk5208-0ba00-2ab2 firmware
- siemens 6gk5208-0ba00-2ac2 firmware
- siemens 6gk5208-0ba00-2fc2 firmware
- siemens 6gk5208-0ba00-2tb2 firmware
- siemens 6gk5208-0ga00-2ac2 firmware
- siemens 6gk5208-0ga00-2fc2 firmware
- siemens 6gk5208-0ga00-2tc2 firmware
- siemens 6gk5208-0ha00-2as6 firmware
- siemens 6gk5208-0ha00-2es6 firmware
- siemens 6gk5208-0ha00-2ts6 firmware
- siemens 6gk5208-0ra00-2ac2 firmware
- siemens 6gk5208-0ra00-5ac2 firmware
- siemens 6gk5208-0ua00-5es6 firmware
- siemens 6gk5213-3bb00-2ab2 firmware
- siemens 6gk5213-3bb00-2tb2 firmware
- siemens 6gk5213-3bd00-2ab2 firmware
- siemens 6gk5213-3bd00-2tb2 firmware
- siemens 6gk5213-3bf00-2ab2 firmware
- siemens 6gk5213-3bf00-2tb2 firmware
- siemens 6gk5216-0ba00-2ab2 firmware
- siemens 6gk5216-0ba00-2ac2 firmware
- siemens 6gk5216-0ba00-2fc2 firmware
- siemens 6gk5216-0ba00-2tb2 firmware
- siemens 6gk5216-0ha00-2as6 firmware
- siemens 6gk5216-0ha00-2es6 firmware
- siemens 6gk5216-0ha00-2ts6 firmware
- siemens 6gk5216-0ua00-5es6 firmware
- siemens 6gk5216-3rs00-2ac2 firmware
- siemens 6gk5216-3rs00-5ac2 firmware
- siemens 6gk5216-4bs00-2ac2 firmware
- siemens 6gk5216-4gs00-2ac2 firmware
- siemens 6gk5216-4gs00-2fc2 firmware
- siemens 6gk5216-4gs00-2tc2 firmware
- siemens 6gk5224-0ba00-2ac2 firmware
- siemens 6gk5224-4gs00-2ac2 firmware
- siemens 6gk5224-4gs00-2fc2 firmware
- siemens 6gk5224-4gs00-2tc2 firmware
- siemens 6gk5324-0ba00-2ar3 firmware
- siemens 6gk5324-0ba00-3ar3 firmware
- siemens 6gk5326-2qs00-3ar3 firmware
- siemens 6gk5326-2qs00-3rr3 firmware
- siemens 6gk5328-4fs00-2ar3 firmware
- siemens 6gk5328-4fs00-2rr3 firmware
- siemens 6gk5328-4fs00-3ar3 firmware
- siemens 6gk5328-4fs00-3rr3 firmware
- siemens 6gk5328-4ss00-2ar3 firmware
- siemens 6gk5328-4ss00-3ar3 firmware
- siemens ruggedcom rm1224 lte(4g) eu
- siemens ruggedcom rm1224 lte(4g) nam
- siemens scalance m804pb
- siemens scalance m812-1 adsl-router
- siemens scalance m816-1 adsl-router
- siemens scalance m826-2 shdsl-router
- siemens scalance m874-2
- siemens scalance m874-3
- siemens scalance m876-3
- siemens scalance m876-3 (rok)
- siemens scalance m876-4
- siemens scalance m876-4 (eu)
- siemens scalance m876-4 (nam)
- siemens scalance mum853-1 (eu)
- siemens scalance mum856-1 (eu)
- siemens scalance mum856-1 (row)
- siemens scalance s615 eec lan-router
- siemens scalance s615 lan-router
- siemens scalance w721-1 rj45
- siemens scalance w722-1 rj45
- siemens scalance w734-1 rj45
- siemens scalance w734-1 rj45 (usa)
- siemens scalance w738-1 m12
- siemens scalance w748-1 m12
- siemens scalance w748-1 rj45
- siemens scalance w761-1 rj45
- siemens scalance w774-1 m12 eec
- siemens scalance w774-1 rj45
- siemens scalance w774-1 rj45 (usa)
- siemens scalance w778-1 m12
- siemens scalance w778-1 m12 eec
- siemens scalance w778-1 m12 eec (usa)
- siemens scalance w786-1 rj45
- siemens scalance w786-2 rj45
- siemens scalance w786-2 sfp
- siemens scalance w786-2ia rj45
- siemens scalance w788-1 m12
- siemens scalance w788-1 rj45
- siemens scalance w788-2 m12
- siemens scalance w788-2 m12 eec
- siemens scalance w788-2 rj45
- siemens scalance wab762-1
- siemens scalance wam763-1
- siemens scalance wam763-1 (me)
- siemens scalance wam763-1 (us)
- siemens scalance wam766-1
- siemens scalance wam766-1 (me)
- siemens scalance wam766-1 (us)
- siemens scalance wam766-1 eec
- siemens scalance wam766-1 eec (me)
- siemens scalance wam766-1 eec (us)
- siemens scalance wub762-1
- siemens scalance wub762-1 ifeatures
- siemens scalance wum763-1
- siemens scalance wum763-1 (us)
- siemens scalance wum766-1
- siemens scalance wum766-1 (me)
- siemens scalance wum766-1 (usa)
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-44373 is a critical vulnerability (CVSS 9.4) in Siemens 6ag1206-2bb00-7ac2 Firmware, published November 14, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.34%, the 71st percentile. No source names a fixed version.
References
cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf