PT-2013-5881 · Siemens · Scalance X-200Irt+1

Published 2013-10-03 · Updated 2020-02-10 · CVE-2013-5944

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens SCALANCE X-200 switches versions prior to 4.5.0 Siemens SCALANCE X-200IRT switches versions prior to 5.1.0

Description The issue concerns the integrated web server on certain Siemens switches, which fails to properly enforce authentication requirements. This allows remote attackers to perform administrative actions by sending requests to the management interface.

Recommendations For Siemens SCALANCE X-200 switches versions prior to 4.5.0, update to version 4.5.0 or later to resolve the issue. For Siemens SCALANCE X-200IRT switches versions prior to 5.1.0, update to version 5.1.0 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2013-5944

Affected Products

Scalance X-200

Scalance X-200Irt

References · 3

• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-176087.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5944 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-176087.pdf · Note