CVE-2024-37992

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-10 · updated 2026-06-17
Weakness: CWE-703

Description

A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0) (All versions < V4.2), SIMATIC Reader RF615R ETSI (6GT2811-6CC10-0AA0) (All versions < V4.2), SIMATIC Reader RF615R FCC (6GT2811-6CC10-1AA0) (All versions < V4.2), SIMATIC Reader RF650R ARIB (6GT2811-6AB20-4AA0) (All versions < V4.2), SIMATIC Reader RF650R CMIIT (6GT2811-6AB20-2AA0) (All versions < V4.2), SIMATIC Reader RF650R ETSI (6GT2811-6AB20-0AA0) (All versions < V4.2), SIMATIC Reader RF650R FCC (6GT2811-6AB20-1AA0) (All versions < V4.2), SIMATIC Reader RF680R ARIB (6GT2811-6AA10-4AA0) (All versions < V4.2), SIMATIC Reader RF680R CMIIT (6GT2811-6AA10-2AA0) (All versions < V4.2), SIMATIC Reader RF680R ETSI (6GT2811-6AA10-0AA0) (All versions < V4.2), SIMATIC Reader RF680R FCC (6GT2811-6AA10-1AA0) (All versions < V4.2), SIMATIC Reader RF685R ARIB (6GT2811-6CA10-4AA0) (All versions < V4.2), SIMATIC Reader RF685R CMIIT (6GT2811-6CA10-2AA0) (All versions < V4.2), SIMATIC Reader RF685R ETSI (6GT2811-6CA10-0AA0) (All versions < V4.2), SIMATIC Reader RF685R FCC (6GT2811-6CA10-1AA0) (All versions < V4.2), SIMATIC RF1140R (6GT2831-6CB00) (All versions < V1.1), SIMATIC RF1170R (6GT2831-6BB00) (All versions < V1.1), SIMATIC RF166C (6GT2002-0EE20) (All versions < V2.2), SIMATIC RF185C (6GT2002-0JE10) (All versions < V2.2), SIMATIC RF186C (6GT2002-0JE20) (All versions < V2.2), SIMATIC RF186CI (6GT2002-0JE50) (All versions < V2.2), SIMATIC RF188C (6GT2002-0JE40) (All versions < V2.2), SIMATIC RF188CI (6GT2002-0JE60) (All versions < V2.2), SIMATIC RF360R (6GT2801-5BA30) (All versions < V2.2). The affected devices does not properly handle the error in case of exceeding characters while setting SNMP leading to the restart of the application.

Affected products

Siemens Simatic Reader Rf610R Cmiit Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf610R Etsi Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf610R Fcc Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf615R Cmiit Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf615R Etsi Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf615R Fcc Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf650R Arib Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf650R Cmiit Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf650R Etsi Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf650R Fcc Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf680R Arib Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf680R Cmiit Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf680R Etsi Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf680R Fcc Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf685R Arib Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf685R Cmiit Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf685R Etsi Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Reader Rf685R Fcc Firmware: before 4.2 — fixed in 4.2
Siemens Simatic Rf1140R Firmware: before 1.1 — fixed in 1.1
Siemens Simatic Rf1170R Firmware: before 1.1 — fixed in 1.1
Siemens Simatic Rf166C Firmware: before 2.2 — fixed in 2.2
Siemens Simatic Rf185C Firmware: before 2.2 — fixed in 2.2
Siemens Simatic Rf186C Firmware: before 2.2 — fixed in 2.2
Siemens Simatic Rf186Ci Firmware: before 2.2 — fixed in 2.2
Siemens Simatic Rf188C Firmware: before 2.2 — fixed in 2.2
Siemens Simatic Rf188Ci Firmware: before 2.2 — fixed in 2.2
Siemens Simatic Rf360R Firmware: before 2.2 — fixed in 2.2

How to fix

Upgrade to a fixed version: Siemens Simatic Reader Rf610R Cmiit Firmware 4.2; Siemens Simatic Reader Rf610R Etsi Firmware 4.2; Siemens Simatic Reader Rf610R Fcc Firmware 4.2; Siemens Simatic Reader Rf615R Cmiit Firmware 4.2; Siemens Simatic Reader Rf615R Etsi Firmware 4.2; Siemens Simatic Reader Rf615R Fcc Firmware 4.2; Siemens Simatic Reader Rf650R Arib Firmware 4.2; Siemens Simatic Reader Rf650R Cmiit Firmware 4.2; Siemens Simatic Reader Rf650R Etsi Firmware 4.2; Siemens Simatic Reader Rf650R Fcc Firmware 4.2; Siemens Simatic Reader Rf680R Arib Firmware 4.2; Siemens Simatic Reader Rf680R Cmiit Firmware 4.2. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/html/ssa-765405.html

Get alerted when CVE-2024-37992 or the next vulnerability affects your stack