CVE-2023-52237 is a vulnerability affecting numerous RUGGEDCOM industrial networking devices, where a low-privileged user can access password hashes and salts from the web server. This allows an attacker to perform offline brute-force attacks against user passwords, including those of administrators. With a CVSS score of 7.5 (High), the vulnerability requires low privileges but has high impact on confidentiality, integrity, and availability, despite a high attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Siemens | RUGGEDCOM M2100 | >= 0, < V4.3.10CNA affecteddefault unknown | |
| Siemens | RUGGEDCOM M2100NC | >= 0, < V4.3.10CNA affecteddefault unknown | |
| Siemens | RUGGEDCOM M2200 | >= 0, < V4.3.10CNA affecteddefault unknown | |
| Siemens | RUGGEDCOM M2200NC | >= 0, < V4.3.10CNA affecteddefault unknown | |
| Siemens | RUGGEDCOM M969 | >= 0, < V4.3.10CNA affecteddefault unknown |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.