Siemens SCALANCE W-700 IEEE 802.11ax Devices Input Validation Vulnerability Allowing Arbitrary Command Execution

An input validation vulnerability has been identified in multiple SCALANCE W-700 IEEE 802.11ax devices, all versions prior to 3.0.0. The affected models include the WAB762-1, WAM763-1, WAM766-1, WUB762-1, and WUM763-1 series. This vulnerability allows authenticated remote attackers to execute arbitrary shell commands on the device by exploiting improper input validation when loading configuration files.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of shell commands on the affected device.

Remediation

Siemens has released version 3.0.0 for the affected products. Instructions for updating can be found on the Siemens Industry Support page.