Threat Investigation
Request a demo

CVE-2025-24532

Medium

Description

A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V3.0.0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) (All versions < V3.0.0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V3.0.0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) (All versions < V3.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V3.0.0), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) (All versions < V3.0.0), SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) (All versions < V3.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V3.0.0), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) (All versions < V3.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V3.0.0). Affected devices with role `user` is affected by incorrect authorization in SNMPv3 View configuration. This could allow an attacker to change the View Type of SNMPv3 Views.

SeverityMedium
CVSS4.3
Exploit probability—
ProductSCALANCE WAB762-1
PublishedFeb 11, 2025
First seenFeb 11, 2025
Weakness typeCWE-284Improper access control

How to fix

Update
  • Siemens SCALANCE WAB762-1V3.0.0 or later
  • Siemens SCALANCE WAM763-1V3.0.0 or later
  • Siemens SCALANCE WAM763-1 (ME)V3.0.0 or later
  • Siemens SCALANCE WAM763-1 (US)V3.0.0 or later
  • Siemens SCALANCE WAM766-1V3.0.0 or later
  • Siemens SCALANCE WAM766-1 (ME)V3.0.0 or later
  • Siemens SCALANCE WAM766-1 (US)V3.0.0 or later
  • Siemens SCALANCE WAM766-1 EECV3.0.0 or later
  • Siemens SCALANCE WAM766-1 EEC (ME)V3.0.0 or later
  • Siemens SCALANCE WAM766-1 EEC (US)V3.0.0 or later
  • Siemens SCALANCE WUB762-1V3.0.0 or later
  • Siemens SCALANCE WUB762-1 iFeaturesV3.0.0 or later

Affected products

ProductAffected versionsFixed in
Siemens SCALANCE WAB762-1v < V3.0.0V3.0.0
Siemens SCALANCE WAM763-1v < V3.0.0V3.0.0
Siemens SCALANCE WAM763-1 (ME)v < V3.0.0V3.0.0
Siemens SCALANCE WAM763-1 (US)v < V3.0.0V3.0.0
Siemens SCALANCE WAM766-1v < V3.0.0V3.0.0
Siemens SCALANCE WAM766-1 (ME)v < V3.0.0V3.0.0
Siemens SCALANCE WAM766-1 (US)v < V3.0.0V3.0.0
Siemens SCALANCE WAM766-1 EECv < V3.0.0V3.0.0
Siemens SCALANCE WAM766-1 EEC (ME)v < V3.0.0V3.0.0
Siemens SCALANCE WAM766-1 EEC (US)v < V3.0.0V3.0.0
Siemens SCALANCE WUB762-1v < V3.0.0V3.0.0
Siemens SCALANCE WUB762-1 iFeaturesv < V3.0.0V3.0.0
Siemens SCALANCE WUM763-1v < V3.0.0V3.0.0
Siemens SCALANCE WUM763-1 (US)v < V3.0.0V3.0.0
Siemens SCALANCE WUM766-1v < V3.0.0V3.0.0
Siemens SCALANCE WUM766-1 (ME)v < V3.0.0V3.0.0
Siemens SCALANCE WUM766-1 (USA)v < V3.0.0V3.0.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-24532 · SCALANCE WAB762-1 · Dark Radar