Weak Random Number Generation in Siemens SCALANCE X-200 Switches

CVE-2013-5709

Summary

The authentication mechanism implemented in the web server of Siemens SCALANCE X-200 switches with firmware versions prior to 5.0.0 is inadequately designed, as it fails to use a robust source of entropy for generating random numbers. This shortcoming enables malicious actors to predict random values more easily, leading to the potential hijacking of active sessions. Organizations using affected devices should prioritize updating their firmware to mitigate these security risks.

References