{"id":"CVE-2023-44373","aliases":["EUVD-2023-48727","GHSA-86gv-6g4q-x856"],"status":"published","title":"A vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions \u003c V4.5), SCALANCE...","description":"Affected devices do not properly sanitize an input field.  This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.","severity":{"version":"4.0","score":9.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.01341,"percentile":0.71736,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-74"],"published":"2023-11-14T11:04:09Z","modified":"2026-06-17T06:27:30Z","products":[{"vendor":"siemens","product":"6ag1206-2bb00-7ac2_firmware"},{"vendor":"siemens","product":"6ag1206-2bs00-7ac2_firmware"},{"vendor":"siemens","product":"6ag1208-0ba00-7ac2_firmware"},{"vendor":"siemens","product":"6ag1216-4bs00-7ac2_firmware"},{"vendor":"siemens","product":"6gk5204-0ba00-2gf2_firmware"},{"vendor":"siemens","product":"6gk5204-0ba00-2yf2_firmware"},{"vendor":"siemens","product":"6gk5204-2aa00-2gf2_firmware"},{"vendor":"siemens","product":"6gk5204-2aa00-2yf2_firmware"},{"vendor":"siemens","product":"6gk5205-3bb00-2ab2_firmware"},{"vendor":"siemens","product":"6gk5205-3bb00-2tb2_firmware"},{"vendor":"siemens","product":"6gk5205-3bd00-2ab2_firmware"},{"vendor":"siemens","product":"6gk5205-3bd00-2tb2_firmware"},{"vendor":"siemens","product":"6gk5205-3bf00-2ab2_firmware"},{"vendor":"siemens","product":"6gk5205-3bf00-2tb2_firmware"},{"vendor":"siemens","product":"6gk5206-2bb00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5206-2bd00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5206-2bs00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5206-2bs00-2fc2_firmware"},{"vendor":"siemens","product":"6gk5206-2gs00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5206-2gs00-2fc2_firmware"},{"vendor":"siemens","product":"6gk5206-2gs00-2tc2_firmware"},{"vendor":"siemens","product":"6gk5206-2rs00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5206-2rs00-5ac2_firmware"},{"vendor":"siemens","product":"6gk5206-2rs00-5fc2_firmware"},{"vendor":"siemens","product":"6gk5208-0ba00-2ab2_firmware"},{"vendor":"siemens","product":"6gk5208-0ba00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5208-0ba00-2fc2_firmware"},{"vendor":"siemens","product":"6gk5208-0ba00-2tb2_firmware"},{"vendor":"siemens","product":"6gk5208-0ga00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5208-0ga00-2fc2_firmware"},{"vendor":"siemens","product":"6gk5208-0ga00-2tc2_firmware"},{"vendor":"siemens","product":"6gk5208-0ha00-2as6_firmware"},{"vendor":"siemens","product":"6gk5208-0ha00-2es6_firmware"},{"vendor":"siemens","product":"6gk5208-0ha00-2ts6_firmware"},{"vendor":"siemens","product":"6gk5208-0ra00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5208-0ra00-5ac2_firmware"},{"vendor":"siemens","product":"6gk5208-0ua00-5es6_firmware"},{"vendor":"siemens","product":"6gk5213-3bb00-2ab2_firmware"},{"vendor":"siemens","product":"6gk5213-3bb00-2tb2_firmware"},{"vendor":"siemens","product":"6gk5213-3bd00-2ab2_firmware"},{"vendor":"siemens","product":"6gk5213-3bd00-2tb2_firmware"},{"vendor":"siemens","product":"6gk5213-3bf00-2ab2_firmware"},{"vendor":"siemens","product":"6gk5213-3bf00-2tb2_firmware"},{"vendor":"siemens","product":"6gk5216-0ba00-2ab2_firmware"},{"vendor":"siemens","product":"6gk5216-0ba00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5216-0ba00-2fc2_firmware"},{"vendor":"siemens","product":"6gk5216-0ba00-2tb2_firmware"},{"vendor":"siemens","product":"6gk5216-0ha00-2as6_firmware"},{"vendor":"siemens","product":"6gk5216-0ha00-2es6_firmware"},{"vendor":"siemens","product":"6gk5216-0ha00-2ts6_firmware"},{"vendor":"siemens","product":"6gk5216-0ua00-5es6_firmware"},{"vendor":"siemens","product":"6gk5216-3rs00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5216-3rs00-5ac2_firmware"},{"vendor":"siemens","product":"6gk5216-4bs00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5216-4gs00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5216-4gs00-2fc2_firmware"},{"vendor":"siemens","product":"6gk5216-4gs00-2tc2_firmware"},{"vendor":"siemens","product":"6gk5224-0ba00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5224-4gs00-2ac2_firmware"},{"vendor":"siemens","product":"6gk5224-4gs00-2fc2_firmware"},{"vendor":"siemens","product":"6gk5224-4gs00-2tc2_firmware"},{"vendor":"siemens","product":"6gk5324-0ba00-2ar3_firmware"},{"vendor":"siemens","product":"6gk5324-0ba00-3ar3_firmware"},{"vendor":"siemens","product":"6gk5326-2qs00-3ar3_firmware"},{"vendor":"siemens","product":"6gk5326-2qs00-3rr3_firmware"},{"vendor":"siemens","product":"6gk5328-4fs00-2ar3_firmware"},{"vendor":"siemens","product":"6gk5328-4fs00-2rr3_firmware"},{"vendor":"siemens","product":"6gk5328-4fs00-3ar3_firmware"},{"vendor":"siemens","product":"6gk5328-4fs00-3rr3_firmware"},{"vendor":"siemens","product":"6gk5328-4ss00-2ar3_firmware"},{"vendor":"siemens","product":"6gk5328-4ss00-3ar3_firmware"},{"vendor":"siemens","product":"ruggedcom rm1224 lte(4g) eu"},{"vendor":"siemens","product":"ruggedcom rm1224 lte(4g) nam"},{"vendor":"siemens","product":"scalance m804pb"},{"vendor":"siemens","product":"scalance m812-1 adsl-router"},{"vendor":"siemens","product":"scalance m816-1 adsl-router"},{"vendor":"siemens","product":"scalance m826-2 shdsl-router"},{"vendor":"siemens","product":"scalance m874-2"},{"vendor":"siemens","product":"scalance m874-3"},{"vendor":"siemens","product":"scalance m876-3"},{"vendor":"siemens","product":"scalance m876-3 (rok)"},{"vendor":"siemens","product":"scalance m876-4"},{"vendor":"siemens","product":"scalance m876-4 (eu)"},{"vendor":"siemens","product":"scalance m876-4 (nam)"},{"vendor":"siemens","product":"scalance mum853-1 (eu)"},{"vendor":"siemens","product":"scalance mum856-1 (eu)"},{"vendor":"siemens","product":"scalance mum856-1 (row)"},{"vendor":"siemens","product":"scalance s615 eec lan-router"},{"vendor":"siemens","product":"scalance s615 lan-router"},{"vendor":"siemens","product":"scalance w721-1 rj45"},{"vendor":"siemens","product":"scalance w722-1 rj45"},{"vendor":"siemens","product":"scalance w734-1 rj45"},{"vendor":"siemens","product":"scalance w734-1 rj45 (usa)"},{"vendor":"siemens","product":"scalance w738-1 m12"},{"vendor":"siemens","product":"scalance w748-1 m12"},{"vendor":"siemens","product":"scalance w748-1 rj45"},{"vendor":"siemens","product":"scalance w761-1 rj45"},{"vendor":"siemens","product":"scalance w774-1 m12 eec"},{"vendor":"siemens","product":"scalance w774-1 rj45"},{"vendor":"siemens","product":"scalance w774-1 rj45 (usa)"},{"vendor":"siemens","product":"scalance w778-1 m12"},{"vendor":"siemens","product":"scalance w778-1 m12 eec"},{"vendor":"siemens","product":"scalance w778-1 m12 eec (usa)"},{"vendor":"siemens","product":"scalance w786-1 rj45"},{"vendor":"siemens","product":"scalance w786-2 rj45"},{"vendor":"siemens","product":"scalance w786-2 sfp"},{"vendor":"siemens","product":"scalance w786-2ia rj45"},{"vendor":"siemens","product":"scalance w788-1 m12"},{"vendor":"siemens","product":"scalance w788-1 rj45"},{"vendor":"siemens","product":"scalance w788-2 m12"},{"vendor":"siemens","product":"scalance w788-2 m12 eec"},{"vendor":"siemens","product":"scalance w788-2 rj45"},{"vendor":"siemens","product":"scalance wab762-1"},{"vendor":"siemens","product":"scalance wam763-1"},{"vendor":"siemens","product":"scalance wam763-1 (me)"},{"vendor":"siemens","product":"scalance wam763-1 (us)"},{"vendor":"siemens","product":"scalance wam766-1"},{"vendor":"siemens","product":"scalance wam766-1 (me)"},{"vendor":"siemens","product":"scalance wam766-1 (us)"},{"vendor":"siemens","product":"scalance wam766-1 eec"},{"vendor":"siemens","product":"scalance wam766-1 eec (me)"},{"vendor":"siemens","product":"scalance wam766-1 eec (us)"},{"vendor":"siemens","product":"scalance wub762-1"},{"vendor":"siemens","product":"scalance wub762-1 ifeatures"},{"vendor":"siemens","product":"scalance wum763-1"},{"vendor":"siemens","product":"scalance wum763-1 (us)"},{"vendor":"siemens","product":"scalance wum766-1"},{"vendor":"siemens","product":"scalance wum766-1 (me)"},{"vendor":"siemens","product":"scalance wum766-1 (usa)"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf","tags":["x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-699386.html","tags":["x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-180704.html","tags":["x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-602936.html","tags":["x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-690517.html","tags":["x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-721642.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019200.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44373"},{"url":"https://github.com/advisories/GHSA-86gv-6g4q-x856"}],"sources":{"cve":[{"id":"CVE-2023-44373","description":"Affected devices do not properly sanitize an input field.  This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.","status":"published","published":"2023-11-14T11:04:09.777Z","modified":"2026-04-14T08:40:33.213Z","cvss":[{"version":"4.0","score":9.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical","assessor":"cna"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"critical","assessor":"cna"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:35:21.232549Z"}],"euvd":[{"id":"EUVD-2023-48727","description":"Affected devices do not properly sanitize an input field.  This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.","status":"published","published":"2023-11-14T11:04:09Z","modified":"2026-04-14T08:40:33Z","cvss":[{"version":"4.0","score":9.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical"}],"updated_at":"2026-11-02T19:24:27.052992Z"}],"ghsa":[{"id":"GHSA-86gv-6g4q-x856","title":"A vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions \u003c V4.5), SCALANCE...","description":"A vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions \u003c V4.5), SCALANCE XB205-3 (ST, E/IP) (All versions \u003c V4.5), SCALANCE XB205-3 (ST, E/IP) (All versions \u003c V4.5), SCALANCE XB205-3 (ST, PN) (All versions \u003c V4.5), SCALANCE XB205-3LD (SC, E/IP) (All versions \u003c V4.5), SCALANCE XB205-3LD (SC, PN) (All versions \u003c V4.5), SCALANCE XB208 (E/IP) (All versions \u003c V4.5), SCALANCE XB208 (PN) (All versions \u003c V4.5), SCALANCE XB213-3 (SC, E/IP) (All versions \u003c V4.5), SCALANCE XB213-3 (SC, PN) (All versions \u003c V4.5), SCALANCE XB213-3 (ST, E/IP) (All versions \u003c V4.5), SCALANCE XB213-3 (ST, PN) (All versions \u003c V4.5), SCALANCE XB213-3LD (SC, E/IP) (All versions \u003c V4.5), SCALANCE XB213-3LD (SC, PN) (All versions \u003c V4.5), SCALANCE XB216 (E/IP) (All versions \u003c V4.5), SCALANCE XB216 (PN) (All versions \u003c V4.5), SCALANCE XC206-2 (SC) (All versions \u003c V4.5), SCALANCE XC206-2 (ST/BFOC) (All versions \u003c V4.5), SCALANCE XC206-2G PoE (All versions \u003c V4.5), SCALANCE XC206-2G PoE (54 V DC) (All versions \u003c V4.5), SCALANCE XC206-2G PoE EEC (54 V DC) (All versions \u003c V4.5), SCALANCE XC206-2SFP (All versions \u003c V4.5), SCALANCE XC206-2SFP EEC (All versions \u003c V4.5), SCALANCE XC206-2SFP G (All versions \u003c V4.5), SCALANCE XC206-2SFP G (EIP DEF.) (All versions \u003c V4.5), SCALANCE XC206-2SFP G EEC (All versions \u003c V4.5), SCALANCE XC208 (All versions \u003c V4.5), SCALANCE XC208EEC (All versions \u003c V4.5), SCALANCE XC208G (All versions \u003c V4.5), SCALANCE XC208G (EIP def.) (All versions \u003c V4.5), SCALANCE XC208G EEC (All versions \u003c V4.5), SCALANCE XC208G PoE (All versions \u003c V4.5), SCALANCE XC208G PoE (54 V DC) (All versions \u003c V4.5), SCALANCE XC216 (All versions \u003c V4.5), SCALANCE XC216-3G PoE (All versions \u003c V4.5), SCALANCE XC216-3G PoE (54 V DC) (All versions \u003c V4.5), SCALANCE XC216-4C (All versions \u003c V4.5), SCALANCE XC216-4C G (All versions \u003c V4.5), SCALANCE XC216-4C G (EIP Def.) (All versions \u003c V4.5), SCALANCE XC216-4C G EEC (All versions \u003c V4.5), SCALANCE XC216EEC (All versions \u003c V4.5), SCALANCE XC224 (All versions \u003c V4.5), SCALANCE XC224-4C G (All versions \u003c V4.5), SCALANCE XC224-4C G (EIP Def.) (All versions \u003c V4.5), SCALANCE XC224-4C G EEC (All versions \u003c V4.5), SCALANCE XF204 (All versions \u003c V4.5), SCALANCE XF204 DNA (All versions \u003c V4.5), SCALANCE XF204-2BA (All versions \u003c V4.5), SCALANCE XF204-2BA DNA (All versions \u003c V4.5), SCALANCE XP208 (All versions \u003c V4.5), SCALANCE XP208 (Ethernet/IP) (All versions \u003c V4.5), SCALANCE XP208EEC (All versions \u003c V4.5), SCALANCE XP208PoE EEC (All versions \u003c V4.5), SCALANCE XP216 (All versions \u003c V4.5), SCALANCE XP216 (Ethernet/IP) (All versions \u003c V4.5), SCALANCE XP216EEC (All versions \u003c V4.5), SCALANCE XP216POE EEC (All versions \u003c V4.5), SCALANCE XR324WG (24 x FE, AC 230V) (All versions \u003c V4.5), SCALANCE XR324WG (24 X FE, DC 24V) (All versions \u003c V4.5), SCALANCE XR326-2C PoE WG (All versions \u003c V4.5), SCALANCE XR326-2C PoE WG (without UL) (All versions \u003c V4.5), SCALANCE XR328-4C WG (24XFE, 4XGE, 24V) (All versions \u003c V4.5), SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V) (All versions \u003c V4.5), SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) (All versions \u003c V4.5), SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) (All versions \u003c V4.5), SCALANCE XR328-4C WG (28xGE, AC 230V) (All versions \u003c V4.5), SCALANCE XR328-4C WG (28xGE, DC 24V) (All versions \u003c V4.5), SIPLUS NET SCALANCE XC206-2 (All versions \u003c V4.5), SIPLUS NET SCALANCE XC206-2SFP (All versions \u003c V4.5), SIPLUS NET SCALANCE XC208 (All versions \u003c V4.5), SIPLUS NET SCALANCE XC216-4C (All versions \u003c V4.5). Affected devices do not properly sanitize an input field.  This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.","status":"published","published":"2023-11-14T12:30:27Z","modified":"2026-04-14T09:30:44Z","cvss":[{"version":"4.0","score":9.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T15:07:28.42851Z"}],"nvd":[{"id":"CVE-2023-44373","description":"Affected devices do not properly sanitize an input field.  This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.","status":"published","published":"2023-11-14T11:15:13.417Z","modified":"2026-06-17T06:27:30.37Z","cvss":[{"version":"4.0","score":9.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:08:46.647045Z"}]}}