8

CVE-2013-3633

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The user privileges for the web interface are only enforced on client side and not properly verified on server side. Therefore, an attacker is able to execute privileged commands using an unprivileged account.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Scalance X200irt Firmware Version <= 5.0.0
Siemens ≫ Scalance X201-3p Irt Version - Update - Edition pro
Siemens ≫ Scalance X202-2irt Version -
Siemens ≫ Scalance X202-2p Irt Version - Update - Edition pro
Siemens ≫ Scalance X204irt Version -
Siemens ≫ Scalance X204irt Version - Update - Edition pro
Siemens ≫ Scalance Xf204irt Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.2% 0.641
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8 8 8.5
AV:N/AC:L/Au:S/C:P/I:P/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://cert-portal.siemens.com/productcert/pdf/ssa-170686.pdf