PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-46714 Siemens CVE debrief

CVE-2024-46714 is a null pointer dereference vulnerability in the AMD display driver subsystem (drm/amd/display). The issue exists in the wbscl_set_scaler_filter function, where callers can pass a null filter parameter (potentially returned from wbscl_get_filter_coeffs_16p) without proper validation. A null check has been added to prevent this condition. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens has assessed this CVE as affecting certain industrial networking products including the RUGGEDCOM RST2428P and SCALANCE families, though the CISA advisory marks the impact assessment as 'Misinformed' for the tracked product IDs. No CVSS score or severity rating is currently available. This vulnerability is not listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.

Vendor
Siemens
Product
RUGGEDCOM RST2428P (6GK6242-6PA00)
CVSS
Unknown
CISA KEV
Not listed in stored evidence
Original CVE published
2025-08-12
Original CVE updated
2026-02-25
Advisory published
2025-08-12
Advisory updated
2026-02-25

Who should care

Organizations operating Siemens industrial networking equipment (RUGGEDCOM RST2428P, SCALANCE XC/XR/XCM/XRM/XCH/XRH families) that incorporate AMD graphics/display components. Industrial control system operators using SINEC OS should monitor for vendor patches.

Technical summary

The vulnerability exists in the AMD display driver's writeback scaler (wbscl) component. The wbscl_set_scaler_filter function did not validate whether the filter parameter was null before dereferencing it. The filter parameter could be null when returned from wbscl_get_filter_coeffs_16p. The fix adds a null check to skip processing when filter is null, preventing potential kernel crashes or undefined behavior from null pointer dereference.

Defensive priority

medium

Recommended defensive actions

  • Review Siemens ProductCERT advisory SSA-355557 for affected product configurations and patch availability
  • Verify if deployed Siemens industrial networking products (RUGGEDCOM RST2428P, SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, SCALANCE XCM-/XRM-/XCH-/XRH-300 family) incorporate the vulnerable AMD display driver
  • Apply vendor-provided firmware updates when available per Siemens security advisory guidance
  • Monitor CISA ICS advisories for updates to ICSA-25-226-07
  • Implement network segmentation for industrial control systems per CISA recommended practices
  • Follow defense-in-depth strategies for industrial control system environments

Evidence notes

The vulnerability description indicates a defensive null pointer check was added to wbscl_set_scaler_filter to handle cases where wbscl_get_filter_coeffs_16p returns null. Siemens ProductCERT SSA-355557 is the canonical advisory source. CISA ICSA-25-226-07 was republished on 2026-02-25 based on the Siemens advisory. The threat category in the source CSAF data is marked 'Misinformed' for affected product IDs CSAFPID-0006, CSAFPID-0002, and CSAFPID-0003.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-46714 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-46714

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-46714 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-46714

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-226-07.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-355557.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-355557.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.