File Disclosure Vulnerability in SCALANCE M875 by Siemens
CVE-2018-4861

4.9MEDIUM

Key Information:

Vendor

Siemens
Status
Scalance M875
Vendor
CVE Published:
26 June 2018

What is CVE-2018-4861?

A security vulnerability has been found in SCALANCE M875 that permits an authenticated remote attacker to read and download arbitrary files from the device's file system. This exploit requires the attacker to have network access to the web interface running on port 443, as well as administrative authentication. At the time of this advisory, there were no known public exploits for this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SCALANCE M875 SCALANCE M875 All versions

References

https://cert-portal.siemens.com/productcert/pdf/ssa-97742...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.