CVE-2022-36324: siemens ruggedcom_rm1224_lte\(4g\)_eu_firmware

Vulnerability summary

CVE-2022-36324 is a high (CVSS 7.5) vulnerability in siemens ruggedcom_rm1224_lte\(4g\)_eu_firmware. EPSS estimates a 1.74% chance of exploitation in the next 30 days, higher than 77.4% of scored vulnerabilities.

Timeline

1. 10-08-2022
   PublishedVulnerability first disclosed.
2. 14-04-2026
   Last modifiedVulnerability information updated.

Description

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

• CWE-770Allocation of Resources Without Limits or ThrottlingThe product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.