CVE-2023-44374

CVE-2023-44374 describes a privilege escalation vulnerability in numerous Siemens RUGGEDCOM and SCALANCE devices across various models and versions prior to V8.0 (or V3.0.0 for some SCALANCE W devices). An authenticated attacker can exploit insufficient password change checks to alter another user's password, potentially including an administrator, leading to elevated privileges. This vulnerability carries a high CVSS score of 8.8, indicating a significant risk. It can be exploited remotely over the network with low attack complexity and requires only low privileges, but has a high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, nor are there any public exploit codes available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.