CVE-2018-4833

Siemens CVE-2018-4833 affects RFID 181-EIP, RUGGEDCOM Win (V4.4–V5.1), SCALANCE X-200/X-IRT/X-200RNA/X-300/X408/X414, and SIMATIC RF182C. Root cause is a heap-based buffer overflow (CWE-122) that allows unprivileged remote attackers in the same L2 network to execute arbitrary code by sending a sp...

CVE-2018-4848

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.3, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.4.1, SCALANCE X-200RNA switch family All versions V3.2.7, SCALANCE X-300 switch family incl. X408 and SIPLUS...

CVE-2018-4848

CVE-2018-4848 affects Siemens SCALANCE X switches: X-200 family (incl. SIPLUS NET) before v5.2.3, X-200IRT before v5.4.1, X-200RNA before v3.2.7, and X-300 (incl. X408) before v4.1.3. Root cause: improper neutralization of input during web page generation (CWE-79) in the integrated configuration ...

CVE-2018-4842

CVE-2018-4842 affects Siemens SCALANCE X switches (X-200, X-200 IRT, X-300; incl. SIPLUS NET) with HRP enabled, allowing remote, authenticated attackers with access to the configuration web server to store script code (XSS) in the hosted web page. Affected versions: X-200 < v5.2.3 (note: CVE-2...

Siemens SCALANCE X Switches Cross-Site Scripting Vulnerability (CNVD-2018-11388)

Siemens SCALANCE X Switches is an industrial Ethernet switch from Siemens, Germany. A cross-site scripting vulnerability exists in Siemens SCALANCE X Switches, which can be exploited by attackers to conduct cross-site scripting attacks...

Siemens SCALANCE X Switches Cross-Site Scripting Vulnerability

Siemens SCALANCE X Switches is an industrial Ethernet switch from Siemens, Germany. A cross-site scripting vulnerability exists in Siemens SCALANCE X Switches, which allows access to configure the remote authentication of the web server if the HRP redundancy option is set An attacker could store...

SIEMENS SCALANCE M875 Command Injection Vulnerability (CNVD-2018-11398)

SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. A command injection vulnerability exists in the SIEMENS...

SIEMENS SCALANCE M875 Arbitrary File Download Vulnerability

SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. SIEMENS SCALANCE M875 has a security vulnerability. An...

SIEMENS SCALANCE M875 Cross-Site Request Forgery Vulnerability

SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. A cross-site request forgery vulnerability exists in SIEME...

SIEMENS SCALANCE M875 Command Injection Vulnerability

SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. A command injection vulnerability exists in the SIEMENS...

SIEMENS SCALANCE M875 Information Disclosure Vulnerability

SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. SIEMENS SCALANCE M875 has an information disclosure...

SIEMENS SCALANCE M875 Cross-Site Scripting Vulnerability

SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. SIEMENS SCALANCE M875 A cross-site scripting vulnerability...

PT-2018-3356 · Siemens · Scalance X-200Irt +4

Name of the Vulnerable Software and Affected Versions: SCALANCE X-200 switch family incl. SIPLUS NET variants versions prior to V5.2.3 SCALANCE X-200IRT switch family incl. SIPLUS NET variants versions prior to V5.4.1 SCALANCE X-200RNA switch family versions prior to V3.2.7 SCALANCE X-300 switch...

Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable from the same local network segment OSI Layer 2 Vendor: Siemens Equipment: SCALANCE X switches, RUGGEDCOM Win, RFID 181-EIP, and SIMATIC RF182C Vulnerability: Heap-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a...

Siemens SCALANCE X Switches (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.8 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SCALANCE X switches Vulnerabilities: Cross-site Scripting 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-18-163-02 Siemens SCALANCE X Switches that was...

PT-2018-3355 · Siemens · Scalance X-200Irt +2

Name of the Vulnerable Software and Affected Versions: SCALANCE X-200IRT switch family incl. SIPLUS NET variants versions prior to V5.4.1 SCALANCE X-200RNA switch family versions prior to V3.2.7 SCALANCE X-300 switch family incl. X408 and SIPLUS NET variants versions prior to V4.1.3 Description: ...

Siemens SCALANCE S613 Denial Of Service

Exploit Title: Siemens SCALANCE S613 - Remote Denial-of-Service Vulnerability Date: 2018-05-23 Exploit Author: t4rkd3vilz Vendor Homepage: https://www.siemens.com/ Version: SCALANCE S613 MLFB: 6GK5613-0BA00-2AA3: All versions. Tested on: Kali Linux CVE: CVE-2016-3963 !/usr/bin/python import socke...

Siemens SCALANCE S613 - Remote Denial of Service

Siemens SCALANCE S613 - Remote Denial of Service Exploit Title: Siemens SCALANCE S613 - Remote Denial of Service Date: 2018-05-23 Exploit Author: t4rkd3vilz Vendor Homepage: https://www.siemens.com/ Version: SCALANCE S613 MLFB: 6GK5613-0BA00-2AA3: All versions. Tested on: Kali Linux CVE:...

Siemens SCALANCE S613 - Remote Denial of Service

Exploit Title: Siemens SCALANCE S613 - Remote Denial of Service Date: 2018-05-23 Exploit Author: t4rkd3vilz Vendor Homepage: https://www.siemens.com/ Version: SCALANCE S613 MLFB: 6GK5613-0BA00-2AA3: All versions. Tested on: Kali Linux CVE: CVE-2016-3963 !/usr/bin/python import socket import sys i...

Siemens SIMATIC SCALANCE Device Detection (SNMP)

SNMP based detection of Siemens SIMATIC SCALANCE devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...