CVE-2024-30191A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE…
- 8.4HighCVSS base score
- 0.23%Exploitation in 30 daysEPSS · top 86% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0), SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0), SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0), SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0), SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0), SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0), SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0), SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0), SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0), SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0), SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6), SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0), SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6), SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0), SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0), SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0), SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0), SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0), SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0), SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0), SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0), SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0), SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0), SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0), SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6), SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0), SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0), SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6), SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0), SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0), SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0), SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0), SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0), SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0), SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0), SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0), SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0), SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0), SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0), SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0), SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0), SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0), SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0), SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0), SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AB0), SCALANCE W788-2 M12 (6GK5788-2GD00-0AA0), SCALANCE W788-2 M12 (6GK5788-2GD00-0AB0), SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TA0), SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TB0), SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TC0), SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0), SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AB0), SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0), SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0), SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0), SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0), SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0). This CVE refers to Scenario 3 "Override client’s security context" of CVE-2022-47522. Affected devices can be tricked into associating a newly negotiated, attacker-controlled, security context with frames belonging to a victim. This could allow a physically proximate attacker to decrypt frames meant for the victim.
Timeline
ID reserved
By siemens
- 15 days later
· 15 days later
Published
- 5 months later
· 5 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| siemensCNA (assigner) | 3.1 | High8.4 | CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H |
| NVDNVD · Deferred | 3.1 | High8.4 | CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.23% · top 86% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.
Affected products
Siemens · SCALANCE W1748-1 M12
- affected < *
Siemens · SCALANCE W1748-1 M12
- affected < *
Siemens · SCALANCE W1788-1 M12
- affected < *
Siemens · SCALANCE W1788-2 EEC M12
- affected < *
Siemens · SCALANCE W1788-2 M12
- affected < *
Siemens · SCALANCE W1788-2IA M12
- affected < *
Siemens · SCALANCE W721-1 RJ45
- affected < *
Siemens · SCALANCE W721-1 RJ45
- affected < *
Siemens · SCALANCE W722-1 RJ45
- affected < *
Siemens · SCALANCE W722-1 RJ45
- affected < *
Siemens · SCALANCE W722-1 RJ45
- affected < *
Siemens · SCALANCE W734-1 RJ45
- affected < *
Siemens · SCALANCE W734-1 RJ45
- affected < *
Siemens · SCALANCE W734-1 RJ45
- affected < *
Siemens · SCALANCE W734-1 RJ45 (USA)
- affected < *
- affected < *
- affected < *
- affected < *
- affected < *
Siemens · SCALANCE W748-1 RJ45
- affected < *
Siemens · SCALANCE W748-1 RJ45
- affected < *
Siemens · SCALANCE W761-1 RJ45
- affected < *
Siemens · SCALANCE W761-1 RJ45
- affected < *
Siemens · SCALANCE W774-1 M12 EEC
- affected < *
Siemens · SCALANCE W774-1 M12 EEC
- affected < *
Siemens · SCALANCE W774-1 RJ45
- affected < *
Siemens · SCALANCE W774-1 RJ45
- affected < *
Siemens · SCALANCE W774-1 RJ45
- affected < *
Siemens · SCALANCE W774-1 RJ45
- affected < *
Siemens · SCALANCE W774-1 RJ45 (USA)
- affected < *
- affected < *
- affected < *
Siemens · SCALANCE W778-1 M12 EEC
- affected < *
Siemens · SCALANCE W778-1 M12 EEC (USA)
- affected < *
Siemens · SCALANCE W786-1 RJ45
- affected < *
Siemens · SCALANCE W786-1 RJ45
- affected < *
Siemens · SCALANCE W786-2 RJ45
- affected < *
Siemens · SCALANCE W786-2 RJ45
- affected < *
Siemens · SCALANCE W786-2 RJ45
- affected < *
- affected < *
- affected < *
Siemens · SCALANCE W786-2IA RJ45
- affected < *
Siemens · SCALANCE W786-2IA RJ45
- affected < *
- affected < *
- affected < *
Siemens · SCALANCE W788-1 RJ45
- affected < *
Siemens · SCALANCE W788-1 RJ45
- affected < *
- affected < *
- affected < *
Siemens · SCALANCE W788-2 M12 EEC
- affected < *
Siemens · SCALANCE W788-2 M12 EEC
- affected < *
Siemens · SCALANCE W788-2 M12 EEC
- affected < *
Siemens · SCALANCE W788-2 RJ45
- affected < *
Siemens · SCALANCE W788-2 RJ45
- affected < *
Siemens · SCALANCE W788-2 RJ45
- affected < *
- affected < *
Siemens · SCALANCE WAM766-1 (EU)
- affected < *
Siemens · SCALANCE WAM766-1 (US)
- affected < *
Siemens · SCALANCE WAM766-1 EEC (EU)
- affected < *
Siemens · SCALANCE WAM766-1 EEC (US)
- affected < *
- affected < *
- affected < *
Siemens · SCALANCE WUM766-1 (EU)
- affected < *
Siemens · SCALANCE WUM766-1 (US)
- affected < *
References
References1
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-28123 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-30191)Record last updated .