CVE-2013-4651

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship...

CVE-2013-4652

Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a 1 SSH or 2 TELNET connection...

Hardcoded credentials

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship...

Authentication flaw

Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a 1 SSH or 2 TELNET connection...

CVE-2013-4651

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship...

CVE-2013-4651

Siemens Scalance W7xx devices (firmware before 4.5.4) use a hard-coded SSL certificate for the management interfaces, enabling possible MITM attacks on SSL sessions by exploiting the trust in that certificate. Affected products include SCALANCE W744-1/1PRO, W746-1/1PRO, W747-1/1RR, W784-1/1RR, W7...

CVE-2013-4652

Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a 1 SSH or 2 TELNET connection...

CVE-2013-4652

Siemens Scalance W-7xx devices running firmware before 4.5.4 are affected by CVE-2013-4652. The vulnerability is in the command-line management interface, allowing remote attackers to bypass authentication and execute arbitrary code via SSH or Telnet due to improper authentication. Several source...

PT-2013-5115

Name of the Vulnerable Software and Affected Versions Siemens Scalance W7xx devices with firmware prior to 4.5.4 Description The issue allows remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging a hardcoded X.509 certificate's trust relationship. This is becaus...

CVE-2013-4651: Undefined Security Weakness

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship...

CVE-2013-4652: Undefined Security Weakness

Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a 1 SSH or 2 TELNET connection...

PT-2013-5116

Name of the Vulnerable Software and Affected Versions Siemens Scalance W7xx devices with firmware prior to 4.5.4 Description The issue allows remote attackers to bypass authentication and execute arbitrary code via a SSH or TELNET connection. Recommendations For Siemens Scalance W7xx devices with...

Siemens SCALANCE X-200 Authentication Bypass Vulnerability

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 01, 2013, and is now being released to the ICS-CERT-Web page. Siemens has identified an authentication bypass vulnerability in the SCALANCE X-200 switch product family. Researcher Eireann Leverett of...

Siemens SCALANCE X-200 Web Hijack Vulnerability

OVERVIEW Siemens has identified a Web hijack vulnerability in the SCALANCE X-200 switch product family. Researcher Eireann Leverett of IOActive coordinated disclosure of the vulnerability with Siemens. Siemens has produced a firmware update that mitigates this vulnerability. This vulnerability...

Siemens SIMATIC SCALANCE Detection (HTTP)

HTTP based detection of Siemens SIMATIC SCALANCE devices. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Siemens SCALANCE Default Credentials (HTTP)

The remote Siemens SCALANCE device is using known default credentials for the HTTP login. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Th...

Siemens Scalance X200 Series Switches Multiple Vulnerabilities (SSA-170686)

Siemens Scalance X200 series switches are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-3634

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants Versions V5.0.0 for CVE-2013-3633 and versions V4.5.0 for CVE-2013-3634, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.1.0. The implementation of SNMPv3 does not check the use...

CVE-2013-3633

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants Versions V5.0.0 for CVE-2013-3633 and versions V4.5.0 for CVE-2013-3634, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.1.0. The user privileges for the web interface are only...

Design/Logic Flaw

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants Versions V5.0.0 for CVE-2013-3633 and versions V4.5.0 for CVE-2013-3634, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.1.0. The user privileges for the web interface are only...