ICS Advisory: Siemens SCALANCE and RUGGEDCOM M-800/S615 Family

Summary:

A vulnerability advisory has been published by CISA (Cybersecurity and Infrastructure Security Agency) regarding multiple vulnerabilities affecting Siemens SCALANCE M-800/S615 family products. The affected products include routers, switches, and access points. The vulnerabilities, CVE-2023-44317 and CVE-2023-49692, are rated CVSS v3 7.2 and can allow an attacker with administrative privileges to execute arbitrary code on the affected device. Users are advised to update to the latest version (V7.2.2 or later) or apply additional mitigations. CISA recommends minimizing network exposure, using firewalls, and implementing VPNs for remote access. No known public exploitation of these vulnerabilities has been reported at this time.