7.5
CVE-2013-3634
- EPSS 0.39%
- Veröffentlicht 24.05.2013 20:55:01
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The implementation of SNMPv3 does not check the user credentials sufficiently. Therefore, an attacker is able to execute SNMP commands without correct credentials.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Scalance X200irt Firmware Version <= 5.0.0
Siemens ≫ Scalance X200-4p Irt Version-
Siemens ≫ Scalance X201-3p Irt Version-
Siemens ≫ Scalance X201-3p Irt Version- Update- Editionpro
Siemens ≫ Scalance X202-2irt Version-
Siemens ≫ Scalance X202-2p Irt Version-
Siemens ≫ Scalance X202-2p Irt Version- Update- Editionpro
Siemens ≫ Scalance X204irt Version-
Siemens ≫ Scalance X204irt Version- Update- Editionpro
Siemens ≫ Scalance Xf204irt Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.39% | 0.57 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.