File Disclosure Vulnerability in SCALANCE M875 by Siemens

CVE-2018-4861

What is CVE-2018-4861?

A security vulnerability has been found in SCALANCE M875 that permits an authenticated remote attacker to read and download arbitrary files from the device's file system. This exploit requires the attacker to have network access to the web interface running on port 443, as well as administrative authentication. At the time of this advisory, there were no known public exploits for this vulnerability.

References