CVEvulnerability

CVE-2013-5944

10.0 HIGH Published 2013-10-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-10-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface.

Affected configurations

• siemens scalance x-200 series firmware (<= 4.4) • siemens scalance x-200 series firmware 4.3 • siemens scalance x-200 • siemens scalance x-200 series firmware (<= 5.0.1) • siemens scalance x-200irt

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References