Lucene search

K
nessusThis script is Copyright (C) 2013-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SCADA_SIEMENS_SCALANCE_X200_WEB_HIJACK.NBIN
HistoryOct 21, 2013 - 12:00 a.m.

Siemens SCALANCE X-200 Web Session Hijacking

2013-10-2100:00:00
This script is Copyright (C) 2013-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
14

According to the self-reported version of the remote Siemens SCALANCE X-200 series device obtained from the SNMP system description, it is vulnerable to a web session hijacking vulnerability. This is due to a weakness in the integrated web server’s random number generator.

Binary data scada_siemens_scalance_x200_web_hijack.nbin