CVE-2023-44318

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-321

Affected software

VendorProductVersions
SiemensRUGGEDCOM RM1224 LTE(4G) EU< *
SiemensRUGGEDCOM RM1224 LTE(4G) NAM< *
SiemensSCALANCE M804PB< *
SiemensSCALANCE M812-1 ADSL-Router< *
SiemensSCALANCE M812-1 ADSL-Router< *
SiemensSCALANCE M816-1 ADSL-Router< *
SiemensSCALANCE M816-1 ADSL-Router< *
SiemensSCALANCE M826-2 SHDSL-Router< *
SiemensSCALANCE M874-2< *
SiemensSCALANCE M874-3< *
SiemensSCALANCE M876-3< *
SiemensSCALANCE M876-3 (ROK)< *
SiemensSCALANCE M876-4< *
SiemensSCALANCE M876-4 (EU)< *
SiemensSCALANCE M876-4 (NAM)< *
SiemensSCALANCE MUM853-1 (EU)< *
SiemensSCALANCE MUM856-1 (EU)< *
SiemensSCALANCE MUM856-1 (RoW)< *
SiemensSCALANCE S615 EEC LAN-Router< *
SiemensSCALANCE S615 LAN-Router< *
SiemensSCALANCE XB205-3 (SC, PN)< *
SiemensSCALANCE XB205-3 (ST, E/IP)< *
SiemensSCALANCE XB205-3 (ST, E/IP)< *
SiemensSCALANCE XB205-3 (ST, PN)< *
SiemensSCALANCE XB205-3LD (SC, E/IP)< *
SiemensSCALANCE XB205-3LD (SC, PN)< *
SiemensSCALANCE XB206-2 (SC)< *
SiemensSCALANCE XB206-2 (ST/BFOC)< *
SiemensSCALANCE XB206-2 LD< *
SiemensSCALANCE XB206-2 SC< *
SiemensSCALANCE XB206-2 ST< *
SiemensSCALANCE XB206-2LD< *
SiemensSCALANCE XB208 (E/IP)< *
SiemensSCALANCE XB208 (PN)< *
SiemensSCALANCE XB213-3 (SC, E/IP)< *
SiemensSCALANCE XB213-3 (SC, PN)< *
SiemensSCALANCE XB213-3 (ST, E/IP)< *
SiemensSCALANCE XB213-3 (ST, PN)< *
SiemensSCALANCE XB213-3LD (SC, E/IP)< *
SiemensSCALANCE XB213-3LD (SC, PN)< *
SiemensSCALANCE XB216 (E/IP)< *
SiemensSCALANCE XB216 (PN)< *
SiemensSCALANCE XC206-2 (SC)< *
SiemensSCALANCE XC206-2 (ST/BFOC)< *
SiemensSCALANCE XC206-2G PoE< *
SiemensSCALANCE XC206-2G PoE (54 V DC)< *
SiemensSCALANCE XC206-2G PoE EEC (54 V DC)< *
SiemensSCALANCE XC206-2SFP< *
SiemensSCALANCE XC206-2SFP EEC< *
SiemensSCALANCE XC206-2SFP G< *

References

Timeline

Published
Nov 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-443194.9A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM CVE-2023-44326.1Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.CVE-2023-443204.3A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NACVE-2023-443216.5Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing aCVE-2023-443225.9A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM CVE-2023-443235.5Adobe Acrobat for Edge version 118.0.2088.46 (and earlier) is affected by a Use After Free vulnerability. An unauthenticated attacker could CVE-2023-443249.8Adobe FrameMaker Publishing Server versions 2022 and earlier are affected by an Improper Authentication vulnerability that could result in aCVE-2023-443255.5Adobe Animate versions 23.0.2 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive meCVE-2023-443265.5Adobe Dimension versions 3.4.9 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mCVE-2023-443275.5Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that coCVE-2023-443285.5Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by a Use After Free vulnerability that could lead to discloCVE-2023-443295.5Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that co
CVE-2023-44318: Medium severity, CVSS 4.9 | Vulnix