CVE-2024-41977

Summary

CVE-2024-41977 is a vulnerability affecting multiple RUGGEDCOM and SCALANCE router models, including RM1224 LTE(4G) EU, RM1224 LTE(4G) NAM, SCALANCE M804PB, and others. These devices do not adequately enforce isolation between user sessions in their web server components. An authenticated attacker can exploit this weakness to escalate their privileges on the affected devices. The following models and versions are vulnerable: RM1224 LTE(4G) EU (< V8.1), RM1224 LTE(4G) NAM (< V8.1), SCALANCE M804PB (< V8.1), SCALANCE M812-1 ADSL-Router family (< V8.1), SCALANCE M816-1 ADSL-Router family (< V8.1), and so on. Users are advised to upgrade to version 8.1 or a higher patch level to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.