10
CVE-2012-1799
- EPSS 1.01%
- Veröffentlicht 18.04.2012 10:33:34
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle cret@cert.org
- Teams Watchlist Login
- Unerledigt Login
The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Scalance S Firmware Version <= 2.3.0
Siemens ≫ Scalance S Firmware Version2.1.0
Siemens ≫ Scalance S Firmware Version2.2.0
Siemens ≫ Scalance S602 Versionv2
Siemens ≫ Scalance S612 Versionv2
Siemens ≫ Scalance S613 Versionv2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.01% | 0.761 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.