Local File System Access Vulnerability in SCALANCE M875 by Siemens
CVE-2018-11449

7.8HIGH

Key Information:

Vendor
Siemens
Status
Scalance M875
Vendor
CVE Published:
26 June 2018

Summary

A vulnerability in SCALANCE M875 allows attackers with local file system access to read sensitive files, potentially exposing administrative passwords. Successful exploitation could lead to unauthorized access to administrative controls. At the time of the advisory, there were no known instances of public exploitation.

Affected Version(s)

SCALANCE M875 SCALANCE M875 All versions

References

https://cert-portal.siemens.com/productcert/pdf/ssa-97742...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.