CVEvulnerability
CVE-2013-4651
6.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.6 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:C
- Weaknesses
- CWE-255
Description
Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.
Affected configurations
• siemens scalance w700 series firmware (<= 4.4.0)
• siemens scalance w744-1
• siemens scalance w744-1pro
• siemens scalance w746-1
• siemens scalance w746-1pro
• siemens scalance w747-1
• siemens scalance w747-1rr
• siemens scalance w784-1
• siemens scalance w784-1rr
• siemens scalance w786-1pro
• siemens scalance w786-2pro
• siemens scalance w786-2rr
• siemens scalance w786-3pro
• siemens scalance w788-1pro
• siemens scalance w788-1rr
• siemens scalance w788-2pro
• siemens scalance w788-2rr