We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-47903



Assignersiemens
Reserved2024-10-04
Published2024-10-23
Updated2024-10-23

Description

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices allows to write arbitrary files to the web server's DocumentRoot directory.



MEDIUM: 5.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Product status

Default status
unknown

Any version before V8.2.12
affected

Default status
unknown

Any version before V7.2.12
affected

References

https://cert-portal.siemens.com/productcert/html/ssa-333468.html

cve.org CVE-2024-47903

nvd.nist.gov CVE-2024-47903

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.