CVEvulnerability

CVE-2012-1802

7.8 HIGH Published 2012-04-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-04-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-119

Description

Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 before 3.7.2 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a malformed URL.

Affected configurations

• siemens scalance x414-3e firmware (<= 3.7.0) • siemens scalance x414-3e firmware 1.2.2 • siemens scalance x414-3e firmware 2.1.1 • siemens scalance x414-3e firmware 2.2.0 • siemens scalance x414-3e firmware 2.3.2 • siemens scalance x414-3e firmware 2.3.3 • siemens scalance x414-3e firmware 3.0.0 • siemens scalance x414-3e firmware 3.0.2 • siemens scalance x414-3e firmware 3.3.0 • siemens scalance x414-3e firmware 3.4.0 • siemens scalance x414-3e • siemens scalance x308-2m firmware (<= 3.7.0) • siemens scalance x308-2m firmware 3.1.1 • siemens scalance x308-2m firmware 3.5.0 • siemens scalance x308-2m firmware 3.5.2 • siemens scalance x308-2m • siemens scalance x-300eec firmware (<= 3.7.0) • siemens scalance x-300eec firmware 3.5.0 • siemens scalance x-300eec • siemens scalance xr-300 firmware (<= 3.7.0) • siemens scalance xr-300 firmware 3.1.1 • siemens scalance xr-300 firmware 3.5.0 • siemens scalance xr-300 • siemens scalance x-300 firmware (<= 3.7.0) • siemens scalance x-300 firmware 2.2.0 • siemens scalance x-300 firmware 2.3.1 • siemens scalance x-300 firmware 3.0.0 • siemens scalance x-300 firmware 3.3.1 • siemens scalance x-300 firmware 3.5.0 • siemens scalance x-300 firmware 3.5.1 • siemens scalance x-300

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References