CVEvulnerability

CVE-2013-4652

10.0 HIGH Published 2013-08-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-08-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a (1) SSH or (2) TELNET connection.

Affected configurations

• siemens scalance w700 series firmware (<= 4.4.0) • siemens scalance w744-1 • siemens scalance w744-1pro • siemens scalance w746-1 • siemens scalance w746-1pro • siemens scalance w747-1 • siemens scalance w747-1rr • siemens scalance w784-1 • siemens scalance w784-1rr • siemens scalance w786-1pro • siemens scalance w786-2pro • siemens scalance w786-2rr • siemens scalance w786-3pro • siemens scalance w788-1pro • siemens scalance w788-1rr • siemens scalance w788-2pro • siemens scalance w788-2rr

References