Access Control Bypass in Siemens SCALANCE Devices

CVE-2019-13933

What is CVE-2019-13933?

A vulnerability exists in various SCALANCE X devices produced by Siemens, enabling potential unauthenticated attackers to bypass access control measures. This flaw can be triggered by sending specific GET requests to the device's web configuration interface. Such actions may grant unauthorized access to sensitive information or allow modifications to the device's settings. Although no public exploitation of this flaw has been detected at the time of the advisory's release, the risk underscores the importance of securing networked systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References