CVE-2018-16555

🗓️ 13 Dec 2018 16:00:00Reported by siemensType

Vulnerability in SCALANCE S602, S612, S623, S627-2M web server allows XSS attacks. User interaction required for exploitation.

Reporter	Title	Published	Views	Family All 10
Tenable Nessus	Siemens SCALANCE S602, S612, S623, S627-2M < 4.0.1.1 Cross-Site Scripting (XSS)	8 May 201900:00	–	nessus
Tenable Nessus	Siemens SCALANCE S Improper Neutralization of Input During Web Page Generation (CVE-2018-16555)	11 Apr 202300:00	–	nessus
BDU FSTEC	The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software is related to insufficient protection of the WEB-page structure, allowing attackers to carry out cross-site scripting attacks.	18 Jan 201900:00	–	bdu_fstec
CNVD	Multiple Siemens Products Cross-Site Scripting Vulnerabilities	16 Nov 201800:00	–	cnvd
Cvelist	CVE-2018-16555	13 Dec 201816:00	–	cvelist
EUVD	EUVD-2018-8362	7 Oct 202500:30	–	euvd
ICS	ICSA-18-317-04 Siemens SCALANCE S	13 Nov 201800:00	–	ics
NVD	CVE-2018-16555	13 Dec 201816:29	–	nvd
Prion	Cross site scripting	13 Dec 201816:29	–	prion
ThreatPost	Siemens Patches Firewall Flaw That Put Operations at Risk	14 Nov 201817:40	–	threatpost

NVD

Node

siemens scalance_s602_firmwareRange<v4.0.1.1

AND

siemens scalance_s602Match-

Node

siemens scalance_s612_firmwareRange<4.0.1.1

AND

siemens scalance_s612Match-

Node

siemens scalance_s623_firmwareRange<4.0.1.1

AND

siemens scalance_s623Match-

Node

siemens scalance_s627-2m_firmwareRange<4.0.1.1

AND

siemens scalance_s627-2mMatch-

[
  {
    "product": "SCALANCE S602, SCALANCE S612, SCALANCE S623, SCALANCE S627-2M",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "SCALANCE S602 : All versions < V4.0.1.1"
      },
      {
        "status": "affected",
        "version": "SCALANCE S612 : All versions < V4.0.1.1"
      },
      {
        "status": "affected",
        "version": "SCALANCE S623 : All versions < V4.0.1.1"
      },
      {
        "status": "affected",
        "version": "SCALANCE S627-2M : All versions < V4.0.1.1"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/105937
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-242982.pdf

21 Nov 2024 03:52Current

5.1Medium risk

Vulners AI Score5.1

CVSS 23.5

CVSS 35.4

EPSS0.00223