CVE-2018-11449

A vulnerability has been identified in SCALANCE M875 All versions. An attacker with access to the local file system might obtain passwords for administrative users. Successful exploitation requires read access to files on the local file system. A successful attack could allow an attacker to obtai...

CVE-2018-4859

A vulnerability has been identified in SCALANCE M875 All versions. An authenticated remote attacker with access to the web interface 443/tcp, could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker...

CVE-2018-4860

A vulnerability has been identified in SCALANCE M875 All versions. An authenticated remote attacker with access to the web interface 443/tcp, could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker...

Cross site request forgery (csrf)

A vulnerability has been identified in SCALANCE M875 All versions. The web interface on port 443/tcp could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by an legitimate user, wh...

Security feature bypass

A vulnerability has been identified in SCALANCE M875 All versions. An authenticated remote attacker with access to the web interface 443/tcp, could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker...

CVE-2018-11448

A vulnerability has been identified in SCALANCE M875 All versions. The web interface on port 443/tcp could allow a stored Cross-Site Scripting XSS attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires that the attacker has access to the web...

CVE-2018-11449

A vulnerability has been identified in SCALANCE M875 All versions. An attacker with access to the local file system might obtain passwords for administrative users. Successful exploitation requires read access to files on the local file system. A successful attack could allow an attacker to obtai...

CVE-2018-4859

A vulnerability has been identified in SCALANCE M875 All versions. An authenticated remote attacker with access to the web interface 443/tcp, could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker...

CVE-2018-4860

A vulnerability has been identified in SCALANCE M875 All versions. An authenticated remote attacker with access to the web interface 443/tcp, could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker...

CVE-2018-4861

A vulnerability has been identified in SCALANCE M875 All versions. An authenticated remote attacker with access to the web interface 443/tcp, could potentially read and download arbitrary files from the device's file system. Successful exploitation requires that the attacker has network access to...

CVE-2018-11448

CVE-2018-11448 affects Siemens SCALANCE M875 (All versions). The vulnerability is a stored Cross-Site Scripting (XSS) in the web interface on port 443/tcp. Exploitation requires access to the affected device’s web interface and authenticated administrative privileges; a legitimate user must subse...

CVE-2018-11449

CVE-2018-11449 affects Siemens SCALANCE M875 (all versions). A local attacker with read access to the device’s local file system can obtain administrative passwords, leading to potential compromise of credentials. The vulnerability is described as an information-disclosure risk in which administr...

CVE-2018-4859

CVE-2018-4859 affects SIEMENS SCALANCE M875 devices. A vulnerability allows an authenticated remote attacker with access to the web interface (443/tcp) to execute arbitrary operating system commands. Successful exploitation requires network access to the web interface and administrative credentia...

CVE-2018-4861

Siemens SCALANCE M875 is affected (all versions). CVE-2018-4861 describes an authenticated remote attacker with access to the web interface (443/tcp) who can read and, per the plugin title, write arbitrary files from the device file system. Exploitation requires network access and administrative ...

CVE-2018-11447

A vulnerability has been identified in SCALANCE M875 All versions. The web interface on port 443/tcp could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by an legitimate user, wh...

CVE-2018-4860

CVE-2018-4860 affects Siemens SCALANCE M875 devices (All versions). An authenticated remote attacker who can reach the web interface on TCP 443, and is logged in as an administrative user, can execute arbitrary operating system commands on the device. The underlying vulnerability enables arbitrar...

CVE-2018-11447

CVE-2018-11447 affects Siemens SCALANCE M875 devices. The vulnerability is a CSRF flaw in the web interface (port 443/tcp) that can allow an authenticated administrative user to interact with the interface as an administrative user when a user is lured to a malicious link. Impact described includ...

CVE-2018-11448: Cross-Site Request Forgery (CSRF)

A vulnerability has been identified in SCALANCE M875 All versions. The web interface on port 443/tcp could allow a stored Cross-Site Scripting XSS attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires that the attacker has access to the web...

CVE-2018-4859: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in SCALANCE M875 All versions. An authenticated remote attacker with access to the web interface 443/tcp, could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker...

CVE-2018-11447: Stack-based Buffer Overflow

A vulnerability has been identified in SCALANCE M875 All versions. The web interface on port 443/tcp could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by an legitimate user, wh...