Skip to content
Fencer Vulns
high 8.4

CVE-2024-30191 json

A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788…

published 2024-04-09 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-28123

cvss
8.4
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 14%
public exploits
0
none known

Summary

A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0), SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0), SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0), SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0), SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0), SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0), SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0), SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0), SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0), SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0), SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6), SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0), SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6), SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0), SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0), SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0), SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0), SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0), SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0), SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0), SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0), SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0), SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0), SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0), SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6), SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0), SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0), SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6), SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0), SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0), SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0), SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0), SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0), SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0), SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0), SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0), SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0), SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0), SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0), SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0), SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0), SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0), SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0), SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0), SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AB0), SCALANCE W788-2 M12 (6GK5788-2GD00-0AA0), SCALANCE W788-2 M12 (6GK5788-2GD00-0AB0), SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TA0), SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TB0), SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TC0), SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0), SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AB0), SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0), SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0), SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0), SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0), SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0). This CVE refers to Scenario 3 "Override client’s security context" of CVE-2022-47522.

Affected devices can be tricked into associating a newly negotiated, attacker-controlled, security context with frames belonging to a victim. This could allow a physically proximate attacker to decrypt frames meant for the victim.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-23-320-05 updated cvss 8.4

Siemens SCALANCE W700

  • Siemens SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) Siemens SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0) Siemens SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0) Siemens SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0) Siemens SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0) Siemens SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0)
    +34 more products
    Siemens SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6) Siemens SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0) Siemens SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6) Siemens SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0) Siemens SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0) Siemens SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0) Siemens SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0) Siemens SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0) Siemens SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0) Siemens SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0) Siemens SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0) Siemens SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0) Siemens SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0) Siemens SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0) Siemens SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6) Siemens SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0) Siemens SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0) Siemens SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6) Siemens SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0) Siemens SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0) Siemens SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0) Siemens SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0) Siemens SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0) Siemens SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0) Siemens SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0) Siemens SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0) Siemens SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0) Siemens SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0) Siemens SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0) Siemens SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0) Siemens SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0) Siemens SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0) Siemens SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0) Siemens SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0)
    affected: mitigation, no fix planned

24 more affected in the full advisory

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.23% chance of exploitation in the next 30 days, higher than 14% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 8.4 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Affected products

  • Siemens SCALANCE W1748-1 M12
  • Siemens SCALANCE W1788-1 M12
  • Siemens SCALANCE W1788-2 EEC M12
  • Siemens SCALANCE W1788-2 M12
  • Siemens SCALANCE W1788-2IA M12
  • Siemens SCALANCE W721-1 RJ45
  • Siemens SCALANCE W722-1 RJ45
  • Siemens SCALANCE W734-1 RJ45
  • Siemens SCALANCE W734-1 RJ45 (USA)
  • Siemens SCALANCE W738-1 M12
  • Siemens SCALANCE W748-1 M12
  • Siemens SCALANCE W748-1 RJ45
  • Siemens SCALANCE W761-1 RJ45
  • Siemens SCALANCE W774-1 M12 EEC
  • Siemens SCALANCE W774-1 RJ45
  • Siemens SCALANCE W774-1 RJ45 (USA)
  • Siemens SCALANCE W778-1 M12
  • Siemens SCALANCE W778-1 M12 EEC
  • Siemens SCALANCE W778-1 M12 EEC (USA)
  • Siemens SCALANCE W786-1 RJ45
  • Siemens SCALANCE W786-2 RJ45
  • Siemens SCALANCE W786-2 SFP
  • Siemens SCALANCE W786-2IA RJ45
  • Siemens SCALANCE W788-1 M12
  • Siemens SCALANCE W788-1 RJ45
  • Siemens SCALANCE W788-2 M12
  • Siemens SCALANCE W788-2 M12 EEC
  • Siemens SCALANCE W788-2 RJ45
  • Siemens SCALANCE WAM763-1
  • Siemens SCALANCE WAM766-1 (EU)
  • Siemens SCALANCE WAM766-1 (US)
  • Siemens SCALANCE WAM766-1 EEC (EU)
  • Siemens SCALANCE WAM766-1 EEC (US)
  • Siemens SCALANCE WUM763-1
  • Siemens SCALANCE WUM766-1 (EU)
  • Siemens SCALANCE WUM766-1 (US)
  • siemens scalance_w1748-1_m12_firmware
  • siemens scalance_w1788-1_m12_firmware
  • siemens scalance_w1788-2_eec_m12_firmware
  • siemens scalance_w1788-2_m12_firmware
  • siemens scalance_w1788-2ia_m12_firmware

Classification

Weakness
  • CWE-290 Authentication Bypass by Spoofing

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.