Remote Code Execution Vulnerability in SCALANCE M875 by Siemens

CVE-2018-4859

Summary

A security flaw exists in the SCALANCE M875, which allows an authenticated remote attacker who has network access to the web interface to execute arbitrary operating system commands. This vulnerability requires the attacker to be authenticated as an administrative user, enabling potential attackers to gain unauthorized control over the device. At the time of publication, there were no known public exploits for this vulnerability.

References