Access Control Bypass in Siemens SCALANCE Devices

CVE-2019-13933

Summary

A vulnerability exists in various SCALANCE X devices produced by Siemens, enabling potential unauthenticated attackers to bypass access control measures. This flaw can be triggered by sending specific GET requests to the device's web configuration interface. Such actions may grant unauthorized access to sensitive information or allow modifications to the device's settings. Although no public exploitation of this flaw has been detected at the time of the advisory's release, the risk underscores the importance of securing networked systems.

References