Authentication Bypass in Siemens Scalance W7xx Devices
CVE-2013-4652

Currently unrated

Key Information:

Vendor
Siemens
Vendor
CVE Published:
1 August 2013

Summary

An unspecified vulnerability in the command-line management interface of Siemens Scalance W7xx devices allows unauthorized access. Attackers can exploit this flaw through SSH or TELNET connections, bypassing authentication mechanisms. This poses significant risks, enabling them to execute arbitrary code remotely, potentially compromising the integrity and confidentiality of the affected systems. Users are advised to ensure their devices are updated to firmware version 4.5.4 or later to mitigate this vulnerability.

References

EPSS Score

11% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.