Injection Vulnerability in SCALANCE W700 802.11 AX Family Before V2.4

An attacker with administrative credentials could inject malicious commands into the SCALANCE W700 wireless access point configuration, potentially gaining full control of the device and using it to compromise connected industrial networks or intercept sensitive communications.

Organizations operating Siemens SCALANCE W700 series 802.11 AX wireless access points in industrial networks should prioritize this update. These devices are commonly used in manufacturing plants, utility substations, and other critical infrastructure to provide wireless connectivity for mobile engineering workstations, process monitoring devices, and temporary installations. Access point compromise could allow an attacker to intercept or manipulate communications between control systems and operator interfaces.

An attacker with admin credentials accesses the device's management interface (web or SSH) and injects shell commands into a configuration parameter or input field that is not properly sanitized. The injected commands execute with device privileges, allowing the attacker to modify device behavior, access network traffic, or establish persistence.