PT-2013-4531 · Siemens · Scalance X200-4P Irt+4

Publicado

2013-05-24

·

Atualizado

2019-12-12

·

CVE-2013-3633

CVSS v2.0

8.0

Alta

VetorAV:N/AC:L/Au:S/C:P/I:P/A:C
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The user privileges for the web interface are only enforced on client side and not properly verified on server side. Therefore, an attacker is able to execute privileged commands using an unprivileged account.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-3633

Produtos afetados

Scalance X200-4P Irt
Scalance X200Irt Firmware
Scalance X201-3P Irt
Scalance X202-2P Irt
Scalance X204Irt