CVE-2018-4842

🗓️ 14 Jun 2018 00:00:00Reported by siemensType

A remote, authenticated attacker with access to the configuration web server could store script code on the web site, affecting confidentiality, integrity, and availability

Reporter	Title	Published	Views	Family All 12
Tenable Nessus	Siemens SCALANCE X Switches XSS	8 May 201900:00	–	nessus
Tenable Nessus	Siemens SCALANCE X Switches Improper Neutralization of Input During Web Page Generation (CVE-2018-4842)	25 Jan 202300:00	–	nessus
BDU FSTEC	The vulnerability of Siemens industrial switches Siemens SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-300 allows attackers to execute cross-site scripting attacks (XSS).	11 Feb 202000:00	–	bdu_fstec
CNVD	Siemens SCALANCE X Switches Cross-Site Scripting Vulnerability	13 Jun 201800:00	–	cnvd
Cvelist	CVE-2018-4842	14 Jun 201800:00	–	cvelist
EUVD	EUVD-2018-16628	7 Oct 202500:30	–	euvd
ICS	Siemens SCALANCE X Switches (Update A)	12 Jun 201800:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	13 Dec 202200:00	–	ncsc
NVD	CVE-2018-4842	14 Jun 201816:29	–	nvd
OSV	CVE-2018-4842	14 Jun 201816:29	–	osv

NVD

Node

siemens scalance_x200irt_firmwareRange<5.4.1

AND

siemens scalance_x200_irtMatch-

Node

siemens scalance_x300_firmwareMatch-

AND

siemens scalance_x300Match-

Node

siemens scalance_x200_firmwareRange<5.2.3

AND

siemens scalance_x200Match-

[
  {
    "vendor": "Siemens",
    "product": "SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)",
    "versions": [
      {
        "version": "All versions < V5.4.1",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X-200RNA switch family",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/104494
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-480829.pdf

17 Jun 2026 01:59Current

4.8Medium risk

Vulners AI Score4.8

CVSS 23.5

CVSS 34.8

EPSS0.00805

CWE-79