CVE-2024-47903: medium-severity vulnerability in Siemens InterMesh 7177 Hybrid 2.0 Subscriber
Published
Follow this CVE+ Monitor InterMesh 7177 Hybrid 2.0 Subscriber+ Monitor InterMesh 7707 Fire Subscriber
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.4%
A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices allows to write arbitrary files to the web server's DocumentRoot directory.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
Affected products
Siemens · InterMesh 7177 Hybrid 2.0 SubscriberSiemens · InterMesh 7707 Fire SubscriberRelated CVEs — Siemens InterMesh 7177 Hybrid 2.0 Subscriber
In the same product, most dangerous first.