Authentication Bypass in Siemens Scalance W7xx Devices
CVE-2013-4652
Currently unrated
Key Information:
- Vendor
- Siemens
- Vendor
- CVE Published:
- 1 August 2013
Summary
An unspecified vulnerability in the command-line management interface of Siemens Scalance W7xx devices allows unauthorized access. Attackers can exploit this flaw through SSH or TELNET connections, bypassing authentication mechanisms. This poses significant risks, enabling them to execute arbitrary code remotely, potentially compromising the integrity and confidentiality of the affected systems. Users are advised to ensure their devices are updated to firmware version 4.5.4 or later to mitigate this vulnerability.
References
EPSS Score
11% chance of being exploited in the next 30 days.
Timeline
Vulnerability Reserved
Vulnerability published