CVE-2023-44319

Summary

CVE-2023-44319 is a vulnerability affecting multiple RUGGEDCOM and SCALANCE devices, including RM1224 LTE(4G) EU and NAM, SCALANCE M804PB, M812-1 ADSL-Router, M816-1 ADSL-Router, M826-2 SHDSL-Router, M874-2, M874-3, M876-3 (ROK, EU, and NAM), MUM853-1 (EU), MUM856-1 (EU and RoW), S615 EEC LAN-Router, S615 LAN-Router, WAB762-1, WAM763-1 (ME, EU, and US), and WAM766-1 (EEC, ME, and US). The issue lies in the use of a weak checksum algorithm to secure configuration backups, which can be exploited by authenticated attackers with administrative privileges or by tricking legitimate administrators into uploading a manipulated configuration file, potentially leading to device configuration changes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.