Siemens SCALANCE, RUGGEDCOM Third-Party

An attacker with network access to these routers could inject commands to gain control of the device, disrupt network connectivity to critical infrastructure, or extract sensitive data. This could cause loss of remote access to field equipment or compromise the integrity of control communications.

Mobile and industrial routers used to provide remote access to distributed field equipment in water utilities, electric utilities, and manufacturing plants. Affected devices include the SCALANCE M-series mobile routers (M874, M876, M804, M812, M816, M826 models), SCALANCE MUM and S-series, and RUGGEDCOM RM1224 LTE devices. These are critical infrastructure gateway devices.

An attacker sends a specially crafted network request to the router that exploits a command injection flaw in one of the third-party components. The router processes the malicious input and executes arbitrary commands with device privileges, allowing the attacker to alter router configuration, intercept traffic, or shut down network connectivity.