ICSA-25-072-07 · Published 2026-05-14 · View on CISA ICS-CERT ↗

Siemens SCALANCE M-800 and SC-600 Families

CVSS 3.7 LOW

Risk Summary

SCALANCE M-800 and SC-600 families are affected by improper input validation in the OpenVPN authentication. Siemens has released new versions for the affected products and recommends to update to the latest versions.

CVEs (1)

CVE-2025-23384

Remediations

Apply a strong password policy for your devices.
Update to V3.2 or later version
Update to V8.2.1 or later version

Affected Vendors

Siemens

Affected Products (32)

Siemens · RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) vers:intdot/<8.2.1

Siemens · RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) vers:intdot/<8.2.1

Siemens · SCALANCE M804PB (6GK5804-0AP00-2AA2) vers:intdot/<8.2.1

Siemens · SCALANCE M812-1 ADSL-Router family vers:intdot/<8.2.1

Siemens · SCALANCE M816-1 ADSL-Router family vers:intdot/<8.2.1

Siemens · SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) vers:intdot/<8.2.1

Siemens · SCALANCE M874-2 (6GK5874-2AA00-2AA2) vers:intdot/<8.2.1

Siemens · SCALANCE M874-3 (6GK5874-3AA00-2AA2) vers:intdot/<8.2.1

Siemens · SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) vers:intdot/<8.2.1

Siemens · SCALANCE M876-3 (6GK5876-3AA02-2BA2) vers:intdot/<8.2.1

Siemens · SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) vers:intdot/<8.2.1

Siemens · SCALANCE M876-4 (6GK5876-4AA10-2BA2) vers:intdot/<8.2.1

Siemens · SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) vers:intdot/<8.2.1

Siemens · SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) vers:intdot/<8.2.1

Siemens · SCALANCE MUB852-1 (A1) (6GK5852-1EA10-1AA1) vers:intdot/<8.2.1

Siemens · SCALANCE MUB852-1 (B1) (6GK5852-1EA10-1BA1) vers:intdot/<8.2.1

Siemens · SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) vers:intdot/<8.2.1

Siemens · SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) vers:intdot/<8.2.1

Siemens · SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) vers:intdot/<8.2.1

Siemens · SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) vers:intdot/<8.2.1

Siemens · SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) vers:intdot/<8.2.1

Siemens · SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) vers:intdot/<8.2.1

Siemens · SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) vers:intdot/<8.2.1

Siemens · SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) vers:intdot/<8.2.1

Siemens · SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) vers:intdot/<8.2.1

Siemens · SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) vers:intdot/<8.2.1

Siemens · SCALANCE SC622-2C (6GK5622-2GS00-2AC2) vers:intdot/<3.2

Siemens · SCALANCE SC626-2C (6GK5626-2GS00-2AC2) vers:intdot/<3.2

Siemens · SCALANCE SC632-2C (6GK5632-2GS00-2AC2) vers:intdot/<3.2

Siemens · SCALANCE SC636-2C (6GK5636-2GS00-2AC2) vers:intdot/<3.2

Siemens · SCALANCE SC642-2C (6GK5642-2GS00-2AC2) vers:intdot/<3.2

Siemens · SCALANCE SC646-2C (6GK5646-2GS00-2AC2) vers:intdot/<3.2

Affected Sectors

Critical Manufacturing

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more