CVE-2018-4848

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.3, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.4.1, SCALANCE X-200RNA switch family All versions V3.2.7, SCALANCE X-300 switch family incl. X408 and SIPLUS...

CVE-2018-4842: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.4.1, SCALANCE X-200RNA switch family All versions V3.2.7, SCALANCE X-300 switch family incl. X408 and SIPLUS NET variants All versions V4.1.3. A remote, authenticated attacker with...

CVE-2018-4842

CVE-2018-4842 affects Siemens SCALANCE X switches (X-200, X-200 IRT, X-300; incl. SIPLUS NET) with HRP enabled, allowing remote, authenticated attackers with access to the configuration web server to store script code (XSS) in the hosted web page. Affected versions: X-200 < v5.2.3 (note: CVE-2...

CVE-2018-4848

CVE-2018-4848 affects Siemens SCALANCE X switches: X-200 family (incl. SIPLUS NET) before v5.2.3, X-200IRT before v5.4.1, X-200RNA before v3.2.7, and X-300 (incl. X408) before v4.1.3. Root cause: improper neutralization of input during web page generation (CWE-79) in the integrated configuration ...

CVE-2018-4833: Heap-based Buffer Overflow

A vulnerability has been identified in RFID 181EIP All versions, RUGGEDCOM Win V4.4, V4.5, V5.0, and V5.1, SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.3, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.4.1, SCALANCE X-200RNA switch family All...

CVE-2018-4848: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.3, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.4.1, SCALANCE X-200RNA switch family All versions V3.2.7, SCALANCE X-300 switch family incl. X408 and SIPLUS...

Siemens SCALANCE X Switches Cross-Site Scripting Vulnerability (CNVD-2018-11388)

Siemens SCALANCE X Switches is an industrial Ethernet switch from Siemens, Germany. A cross-site scripting vulnerability exists in Siemens SCALANCE X Switches, which can be exploited by attackers to conduct cross-site scripting attacks...

Siemens SCALANCE X Switches Cross-Site Scripting Vulnerability

Siemens SCALANCE X Switches is an industrial Ethernet switch from Siemens, Germany. A cross-site scripting vulnerability exists in Siemens SCALANCE X Switches, which allows access to configure the remote authentication of the web server if the HRP redundancy option is set An attacker could store...

SIEMENS SCALANCE M875 Command Injection Vulnerability

SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. A command injection vulnerability exists in the SIEMENS...

SIEMENS SCALANCE M875 Arbitrary File Download Vulnerability

SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. SIEMENS SCALANCE M875 has a security vulnerability. An...

SIEMENS SCALANCE M875 Cross-Site Request Forgery Vulnerability

SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. A cross-site request forgery vulnerability exists in SIEME...

SIEMENS SCALANCE M875 Cross-Site Scripting Vulnerability

SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. SIEMENS SCALANCE M875 A cross-site scripting vulnerability...

SIEMENS SCALANCE M875 Command Injection Vulnerability (CNVD-2018-11398)

SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. A command injection vulnerability exists in the SIEMENS...

SIEMENS SCALANCE M875 Information Disclosure Vulnerability

SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. SIEMENS SCALANCE M875 has an information disclosure...

PT-2018-3356 · Siemens · Scalance X-200Irt +4

Name of the Vulnerable Software and Affected Versions: SCALANCE X-200 switch family incl. SIPLUS NET variants versions prior to V5.2.3 SCALANCE X-200IRT switch family incl. SIPLUS NET variants versions prior to V5.4.1 SCALANCE X-200RNA switch family versions prior to V3.2.7 SCALANCE X-300 switch...

PT-2018-3355 · Siemens · Scalance X-200Irt +2

Name of the Vulnerable Software and Affected Versions: SCALANCE X-200IRT switch family incl. SIPLUS NET variants versions prior to V5.4.1 SCALANCE X-200RNA switch family versions prior to V3.2.7 SCALANCE X-300 switch family incl. X408 and SIPLUS NET variants versions prior to V4.1.3 Description: ...

PT-2018-2346

Name of the Vulnerable Software and Affected Versions RFID 181EIP versions prior to not specified RUGGEDCOM Win versions 4.4 through 5.1 SCALANCE X-200 switch family versions prior to 5.2.3 SCALANCE X-200IRT switch family versions prior to 5.4.1 SCALANCE X-200RNA switch family versions prior to...

Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable from the same local network segment OSI Layer 2 Vendor: Siemens Equipment: SCALANCE X switches, RUGGEDCOM Win, RFID 181-EIP, and SIMATIC RF182C Vulnerability: Heap-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a...

Siemens SCALANCE X Switches (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.8 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SCALANCE X switches Vulnerabilities: Cross-site Scripting 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-18-163-02 Siemens SCALANCE X Switches that was...

Siemens SCALANCE S613 Denial Of Service

Exploit Title: Siemens SCALANCE S613 - Remote Denial-of-Service Vulnerability Date: 2018-05-23 Exploit Author: t4rkd3vilz Vendor Homepage: https://www.siemens.com/ Version: SCALANCE S613 MLFB: 6GK5613-0BA00-2AA3: All versions. Tested on: Kali Linux CVE: CVE-2016-3963 !/usr/bin/python import socke...