Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87965
HistoryDec 14, 2022 - 12:00 a.m.

Siemens SCALANCE X-200RNA Switch Devices Improper Access Control Vulnerability

2022-12-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
siemens
scalance x-200rna
switch
access control
vulnerability
industrial ethernet
web server
remote attackers
confidential information

EPSS

0.001

Percentile

48.2%

The SCALANCE X-204RNA Industrial Ethernet Access Point enables non-PRP endpoint devices to connect to a separate parallel network as needed.A security vulnerability exists in Siemens SCALANCE X-200RNA Switch Devices due to a specific security header missing from the affected device’s web server. Allows remote attackers to exploit the vulnerability to extract confidential session information under certain circumstances.

EPSS

0.001

Percentile

48.2%

Related for CNVD-2022-87965