PT-2013-5881 · Siemens · Scalance X-200Irt+1

Publicado 2013-10-03 · Atualizado 2020-02-10 · CVE-2013-5944

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens SCALANCE X-200 switches versions prior to 4.5.0 Siemens SCALANCE X-200IRT switches versions prior to 5.1.0

Description The issue concerns the integrated web server on certain Siemens switches, which fails to properly enforce authentication requirements. This allows remote attackers to perform administrative actions by sending requests to the management interface.

Recommendations For Siemens SCALANCE X-200 switches versions prior to 4.5.0, update to version 4.5.0 or later to resolve the issue. For Siemens SCALANCE X-200IRT switches versions prior to 5.1.0, update to version 5.1.0 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2013-5944

Produtos afetados

Scalance X-200

Scalance X-200Irt

Referências · 3

• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-176087.pdf · Aviso do Fabricante
• https://cert-portal.siemens.com/productcert/pdf/ssa-176087.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-5944 · Nota de Segurança