Siemens SCALANCE M875 Arbitrary OS Command Execution (CVE-2018-4860)

A vulnerability has been identified in SCALANCE M875 All versions. An authenticated remote attacker with access to the web interface 443/tcp, could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker...

CVE-2018-4860

CVE-2018-4860 affects Siemens SCALANCE M875 devices (All versions). An authenticated remote attacker who can reach the web interface on TCP 443, and is logged in as an administrative user, can execute arbitrary operating system commands on the device. The underlying vulnerability enables arbitrar...