Authentication Bypass Vulnerability in Siemens Scalance S Security Module Firewall

CVE-2012-1799

Summary

The web server on Siemens Scalance S602 V2, S612 V2, and S613 V2 models with firmware versions prior to 2.3.0.3 is susceptible to an authentication vulnerability. This flaw allows remote attackers to exploit the system by performing unlimited authentication attempts, thus increasing the likelihood of a successful brute-force attack on the administrative password, potentially granting unauthorized access to sensitive configuration settings.

References