CVE-2013-5944

Currently unrated

Key Information:

Vendor
Siemens
Status
Scalance X-200 Series Firmware
Scalance X-200
Vendor
CVE Published:
3 October 2013

Summary

The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface.

References

http://www.siemens.com/innovation/pool/de/forschungsfelde...
x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-17608...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.