Siemens SCALANCE X-200IRT Switch Family User Impersonation Vulnerability

OVERVIEW Siemens has identified a user impersonation vulnerability in its SCALANCE X-200IRT Switch Family. Siemens has produced a firmware update that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Siemens reports that the vulnerability affects the...

Siemens SCALANCE X-200IRT < 5.2.0 Session Hijacking

Binary data scadasiemensscalancex200cve-2015-1049.nbin...

CVE-2015-1049

CVE-2015-1049 affects Siemens SCALANCE X-200IRT switches with firmware versions prior to 5.2.0. The vulnerability arises from improper authentication in the device web server, allowing remote attackers to hijack an authenticated user’s web session (session impersonation) via unspecified vectors. ...