CVE-2023-44374

Summary

CVE-2023-44374 refers to a password change vulnerability affecting multiple RUGGEDCOM and SCALANCE devices, including the RM1224 LTE series, SCALANCE M804PB, M812-1 ADSL-Router, M816-1 ADSL-Router, M826-2 SHDSL-Router, M874-2, M874-3, M876-3, M876-4, MUM853-1, MUM856-1, S615 EEC LAN-Router, S615 LAN-Router, WAB762-1, WAM763-1, WAM766-1, and WUB762-1. The vulnerability lies in the fact that these devices allow password changes without sufficiently checking which password is being altered. An attacker with authorized access could potentially manipulate this process to change the password of another user, including potential admin accounts, leading to privilege escalation. All versions of the listed devices prior to V8.0 are affected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.