Details of VAR-202410-2548

ID

VAR-202410-2548

CVE

CVE-2024-49973

TITLE

Linux of Linux Kernel Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2024-011928

DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125 RTL8125 added fields to the tally counter, what may result in the chip dma'ing these new fields to unallocated memory. Therefore make sure that the allocated memory area is big enough to hold all of the tally counter values, even if we use only parts of it. Linux of Linux Kernel Exists in unspecified vulnerabilities.Service operation interruption (DoS) It may be in a state. The RUGGEDCOM RST2428P is a Layer 2 Ethernet switch based on SINEC OS with up to 28 non-blocking interfaces. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLCs) and human-machine interfaces (HMIs). Multiple vulnerabilities exist in third-party components prior to SIEMENS SINEC OS V3.2. These vulnerabilities could be exploited to corrupt values, leading to undefined behavior or security issues

Trust: 2.16

sources: NVD: CVE-2024-49973 // JVNDB: JVNDB-2024-011928 // CNVD: CNVD-2025-19350

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-19350

AFFECTED PRODUCTS

vendor:	linux	model:	kernel	scope:	lt	version:	6.6.55	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	5.4	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	6.1.113	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	6.7	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	6.10.14	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	5.16	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	6.11	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	5.11	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	6.2	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	5.10.227	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	5.15.168	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	6.11.3	Trust: 1.0
vendor:	linux	model:	kernel	scope:	eq	version:	6.11 that's all 6.11.3	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	-	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	5.11 that's all 5.15.168	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	5.4 that's all 5.10.227	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	5.16 that's all 6.1.113	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	6.2 that's all 6.6.55	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	6.7 that's all 6.10.14	Trust: 0.8
vendor:	siemens	model:	ruggedcom rst2428p	scope:	lt	version:	v3.2	Trust: 0.6
vendor:	siemens	model:	scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family	scope:	lt	version:	v3.2	Trust: 0.6
vendor:	siemens	model:	scalance xcm-/xrm-/xch-/xrh-300 family	scope:	lt	version:	v3.2	Trust: 0.6

sources: CNVD: CNVD-2025-19350 // JVNDB: JVNDB-2024-011928 // NVD: CVE-2024-49973

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2024-49973
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2024-49973
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2025-19350
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2025-19350
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2024-49973
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	CVE-2024-49973
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2025-19350 // JVNDB: JVNDB-2024-011928 // NVD: CVE-2024-49973

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	Lack of information (CWE-noinfo) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2024-011928 // NVD: CVE-2024-49973

PATCH

title:	Linux Kernel Archives	url:	https://git.kernel.org/stable/c/1c723d785adb711496bc64c24240f952f4faaabf	Trust: 0.8
title:	Patch for Multiple vulnerabilities exist in third-party components of SIEMENS SINEC OS V3.2 and earlier	url:	https://www.cnvd.org.cn/patchInfo/show/723061	Trust: 0.6

sources: CNVD: CNVD-2025-19350 // JVNDB: JVNDB-2024-011928

EXTERNAL IDS

db:	NVD	id:	CVE-2024-49973	Trust: 2.6
db:	SIEMENS	id:	SSA-355557	Trust: 1.6
db:	SIEMENS	id:	SSA-265688	Trust: 1.0
db:	JVNDB	id:	JVNDB-2024-011928	Trust: 0.8
db:	CNVD	id:	CNVD-2025-19350	Trust: 0.6

sources: CNVD: CNVD-2025-19350 // JVNDB: JVNDB-2024-011928 // NVD: CVE-2024-49973

REFERENCES

url:	https://cert-portal.siemens.com/productcert/html/ssa-355557.html	Trust: 1.6
url:	https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html	Trust: 1.0
url:	https://git.kernel.org/stable/c/21950321ad33d7613b1453f4c503d7b1871deb61	Trust: 1.0
url:	https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html	Trust: 1.0
url:	https://git.kernel.org/stable/c/1c723d785adb711496bc64c24240f952f4faaabf	Trust: 1.0
url:	https://git.kernel.org/stable/c/fe44b3bfbf0c74df5712f44458689d0eccccf47d	Trust: 1.0
url:	https://git.kernel.org/stable/c/991e8b0bab669b7d06927c3e442b3352532e8581	Trust: 1.0
url:	https://cert-portal.siemens.com/productcert/html/ssa-265688.html	Trust: 1.0
url:	https://git.kernel.org/stable/c/64648ae8c97ec5a3165021627f5a1658ebe081ca	Trust: 1.0
url:	https://git.kernel.org/stable/c/92bc8647b4d65f4d4bf8afdb206321c1bc55a486	Trust: 1.0
url:	https://git.kernel.org/stable/c/ced8e8b8f40accfcce4a2bbd8b150aa76d5eff9a	Trust: 1.0
url:	https://git.kernel.org/stable/c/585c048d15ed559f20cb94c8fa2f30077efa4fbc	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2024-49973	Trust: 0.8

sources: CNVD: CNVD-2025-19350 // JVNDB: JVNDB-2024-011928 // NVD: CVE-2024-49973

SOURCES

db:	CNVD	id:	CNVD-2025-19350
db:	JVNDB	id:	JVNDB-2024-011928
db:	NVD	id:	CVE-2024-49973

LAST UPDATE DATE

2026-06-19T22:06:18.678000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2025-19350	date:	2025-08-22T00:00:00
db:	JVNDB	id:	JVNDB-2024-011928	date:	2024-11-05T07:10:00
db:	NVD	id:	CVE-2024-49973	date:	2026-05-12T13:16:15.290

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2025-19350	date:	2025-08-12T00:00:00
db:	JVNDB	id:	JVNDB-2024-011928	date:	2024-11-05T00:00:00
db:	NVD	id:	CVE-2024-49973	date:	2024-10-21T18:15:18.163