8.3
CVE-2013-5709
- EPSS 2.18%
- Published 17.09.2013 12:04:28
- Last modified 11.04.2025 00:51:21
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value.
Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Scalance X-200 Series Firmware Version <= 4.4
Siemens ≫ Scalance X-200 Series Firmware Version4.3
Siemens ≫ Scalance X-200 Version-
Siemens ≫ Scalance X-200rna Version-
Siemens ≫ Scalance X200-4p Irt Version-
Siemens ≫ Scalance X201-3p Irt Version-
Siemens ≫ Scalance X201-3p Irt Version- Update- Editionpro
Siemens ≫ Scalance X202-2irt Version-
Siemens ≫ Scalance X202-2p Irt Version-
Siemens ≫ Scalance X202-2p Irt Version- Update- Editionpro
Siemens ≫ Scalance X204irt Version-
Siemens ≫ Scalance X204irt Version- Update- Editionpro
Siemens ≫ Scalance Xf-200 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.18% | 0.837 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 8.3 | 8.6 | 8.5 |
AV:N/AC:M/Au:N/C:P/I:P/A:C
|