Siemens SCALANCE X200 IRT Switches < 5.1.0 HTTP Command Execution

2019-05-0800:00:00

Tenable

www.tenable.com

The web interface on Siemens Scalance X200 IRT switches with firmware before X-200IRT 5.1.0 relies on client-side privilege checks, which allows remote authenticated users to execute arbitrary commands via unspecified vectors.

Binary data 720037.prm

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3633

ics-cert.us-cert.gov/advisories/ICSA-13-149-01,www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-170686.pdf

JSON