EUVD-2013-4506

Malware in sbrugna...

CVE-2024-30189

A vulnerability has been identified in SCALANCE W721-1 RJ45 6GK5721-1FC00-0AA0 All versions, SCALANCE W721-1 RJ45 6GK5721-1FC00-0AB0 All versions, SCALANCE W722-1 RJ45 6GK5722-1FC00-0AA0 All versions, SCALANCE W722-1 RJ45 6GK5722-1FC00-0AB0 All versions, SCALANCE W722-1 RJ45 6GK5722-1FC00-0AC0 Al...

CVE-2024-30189

CVE-2024-30189 (SCALANCE W700/W721/W722/W734/W738/W748/W761/W774/W778/W786-W788 family) describes a vulnerability in the IEEE 802.11 process where frames are leaked from the Wi‑Fi queue to change a victim’s security context. This allows a physically proximate attacker to intercept target-destined...

Siemens Scalance W-7xx Series Hard-coded SSL Certificate (CVE-2013-4651)

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the- middle attacks against SSL sessions by leveraging the certificate's trust relationship. Th...

CVE-2013-4652

Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a 1 SSH or 2 TELNET connection...

Hardcoded credentials

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship...

Authentication flaw

Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a 1 SSH or 2 TELNET connection...

CVE-2013-4652

Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a 1 SSH or 2 TELNET connection...

CVE-2013-4651

Siemens Scalance W7xx devices (firmware before 4.5.4) use a hard-coded SSL certificate for the management interfaces, enabling possible MITM attacks on SSL sessions by exploiting the trust in that certificate. Affected products include SCALANCE W744-1/1PRO, W746-1/1PRO, W747-1/1RR, W784-1/1RR, W7...

CVE-2013-4652

Siemens Scalance W-7xx devices running firmware before 4.5.4 are affected by CVE-2013-4652. The vulnerability is in the command-line management interface, allowing remote attackers to bypass authentication and execute arbitrary code via SSH or Telnet due to improper authentication. Several source...

PT-2013-5115

Name of the Vulnerable Software and Affected Versions Siemens Scalance W7xx devices with firmware prior to 4.5.4 Description The issue allows remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging a hardcoded X.509 certificate's trust relationship. This is becaus...

PT-2013-5116

Name of the Vulnerable Software and Affected Versions Siemens Scalance W7xx devices with firmware prior to 4.5.4 Description The issue allows remote attackers to bypass authentication and execute arbitrary code via a SSH or TELNET connection. Recommendations For Siemens Scalance W7xx devices with...

CVE-2013-4651: Undefined Security Weakness

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship...

CVE-2013-4652: Undefined Security Weakness

Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a 1 SSH or 2 TELNET connection...