8
CVE-2013-3633
- EPSS 0.37%
- Veröffentlicht 24.05.2013 20:55:01
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The user privileges for the web interface are only enforced on client side and not properly verified on server side. Therefore, an attacker is able to execute privileged commands using an unprivileged account.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Scalance X200irt Firmware Version <= 5.0.0
Siemens ≫ Scalance X200-4p Irt Version-
Siemens ≫ Scalance X201-3p Irt Version-
Siemens ≫ Scalance X201-3p Irt Version- Update- Editionpro
Siemens ≫ Scalance X202-2irt Version-
Siemens ≫ Scalance X202-2p Irt Version-
Siemens ≫ Scalance X202-2p Irt Version- Update- Editionpro
Siemens ≫ Scalance X204irt Version-
Siemens ≫ Scalance X204irt Version- Update- Editionpro
Siemens ≫ Scalance Xf204irt Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.558 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8 | 8 | 8.5 |
AV:N/AC:L/Au:S/C:P/I:P/A:C
|