PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-50572 Siemens CVE debrief

CVE-2024-50572 affects multiple Siemens SCALANCE W700-series devices. According to CISA and Siemens, an authenticated remote attacker with administrative privileges could exploit improper input sanitization to inject code or spawn a system root shell. Siemens lists an update to V3.0.0 or later as the fix.

Vendor
Siemens
Product
SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0)
CVSS
HIGH 7.2
CISA KEV
Not listed in stored evidence
Original CVE published
2025-02-11
Original CVE updated
2025-05-06
Advisory published
2025-02-11
Advisory updated
2025-05-06

Who should care

Operators and maintainers of Siemens SCALANCE WAB/WAM/WUB/WUM devices in industrial or OT networks, especially teams that allow remote administrative access.

Technical summary

The advisory describes an input sanitization weakness in affected SCALANCE devices. Because the vulnerable path can be reached by an authenticated remote attacker with administrative privileges, successful abuse could lead to code execution with root-level impact on confidentiality, integrity, and availability. The published remediation is to update affected products to V3.0.0 or later.

Defensive priority

High

Recommended defensive actions

  • Upgrade all affected Siemens SCALANCE WAB762-1, WAM763-1, WAM766-1, WUB762-1, and WUM763/766 variants to V3.0.0 or later as directed by Siemens.
  • Restrict administrative access to device management interfaces to trusted hosts and networks only.
  • Apply least-privilege access for administrative accounts and review who can manage affected devices.
  • Use CISA ICS recommended practices and Siemens guidance to harden OT management paths, logging, and change control.

Evidence notes

The supplied CISA CSAF advisory ICSA-25-044-09 and Siemens advisory SSA-769027 both state that affected devices do not properly sanitize an input field, allowing an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. The advisory covers 19 Siemens SCALANCE product variants and recommends updating to V3.0.0 or later. The advisory was published on 2025-02-11 and revised on 2025-05-06; the revision history says the later change fixed typos only. No KEV listing is included in the supplied enrichment.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-50572 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-50572

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-50572 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-50572

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-044-09.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-769027.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-769027.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.