8
CVE-2013-3633
- EPSS 0.37%
- Published 24.05.2013 20:55:01
- Last modified 11.04.2025 00:51:21
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The user privileges for the web interface are only enforced on client side and not properly verified on server side. Therefore, an attacker is able to execute privileged commands using an unprivileged account.
Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Scalance X200irt Firmware Version <= 5.0.0
Siemens ≫ Scalance X200-4p Irt Version-
Siemens ≫ Scalance X201-3p Irt Version-
Siemens ≫ Scalance X201-3p Irt Version- Update- Editionpro
Siemens ≫ Scalance X202-2irt Version-
Siemens ≫ Scalance X202-2p Irt Version-
Siemens ≫ Scalance X202-2p Irt Version- Update- Editionpro
Siemens ≫ Scalance X204irt Version-
Siemens ≫ Scalance X204irt Version- Update- Editionpro
Siemens ≫ Scalance Xf204irt Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.558 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 8 | 8 | 8.5 |
AV:N/AC:L/Au:S/C:P/I:P/A:C
|