Siemens SCALANCE X-200IRT Web Server Session Hijacking Vulnerability

Siemens SCALANCE X-200IRT is an industrial Ethernet switch from Siemens, Germany. A security vulnerability exists in the web server in Siemens SCALANCE X-200IRT switches prior to version 5.2.0. A remote attacker could exploit the vulnerability to hijack a session...

CVE-2015-1049

The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors...

Code injection

The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors...

CVE-2015-1049

CVE-2015-1049 affects Siemens SCALANCE X-200IRT switches with firmware versions prior to 5.2.0. The vulnerability arises from improper authentication in the device web server, allowing remote attackers to hijack an authenticated user’s web session (session impersonation) via unspecified vectors. ...

CVE-2015-1049

The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors...

CVE-2015-1049: Improper Input Validation

The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors...

PT-2015-5036

Name of the Vulnerable Software and Affected Versions Siemens SCALANCE X-200IRT switches versions prior to 5.2.0 Description The issue allows remote attackers to hijack sessions via unspecified vectors on the web server of the affected switches. Recommendations For versions prior to 5.2.0, update...

Siemens Scalance X Switches Denial of Service Vulnerability

Siemens Scalance X Switches are switching devices developed by Siemens. A denial of service vulnerability exists in Siemens Scalance X Switches, which allows an attacker to reboot the affected device and deny service to legitimate users...

Siemens Scalance X Switches 'HTTP' Request Denial of Service Vulnerability

Siemens Scalance X Switches are switching devices developed by Siemens. The Siemens Scalance X Switches 'HTTP' request denial of service vulnerability allows an attacker to reboot the affected device and deny service to legitimate users...

CVE-2014-8479

The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service reboot via crafted FTP packets...

Design/Logic Flaw

The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service reboot via crafted FTP packets...

Design/Logic Flaw

The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service reboot via malformed HTTP requests...

CVE-2014-8478

The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service reboot via malformed HTTP requests...

CVE-2014-8478

The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service reboot via malformed HTTP requests...

CVE-2014-8479

The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service reboot via crafted FTP packets...

CVE-2014-8478

Siemens SCALANCE X-300 family switches (all versions prior to V4.0) and SCALANCE X-408 (all versions prior to V4.0) expose a remote denial-of-service vulnerability in the device web/HTTP services. Malformed HTTP requests to the web server can cause the device to reboot, interrupting network conne...

CVE-2014-8479

The CVE-2014-8479 entry affects Siemens SCALANCE X-300 switches (and X-408) with firmware before 4.0, where the FTP server component can be abused by remote authenticated users to trigger a reboot (DoS) via specially crafted FTP packets. Root cause centers on the FTP server handling of crafted tr...

CVE-2014-8479: Improper Input Validation

The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service reboot via crafted FTP packets...

PT-2015-4046

Name of the Vulnerable Software and Affected Versions Siemens SCALANCE X-300 switches versions prior to 4.0 Siemens SCALANCE X 408 switches versions prior to 4.0 Description The issue allows remote attackers to cause a denial of service, resulting in a reboot of the device, by sending malformed...

CVE-2014-8478: Improper Limitation of a Pathname to a Restricted Directory

The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service reboot via malformed HTTP requests...