First published: Thu Oct 03 2013(Updated: )
The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Siemens SCALANCE X-200 Firmware | <=4.4 | |
Siemens SCALANCE X-200 Firmware | =4.3 | |
Siemens Scalance X200 | ||
Siemens SCALANCE X-200 Firmware | <=5.0.1 | |
Siemens Scalance X-200 IRT |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-5944 is considered to have a high severity rating due to the potential for remote administrative access by attackers.
To fix CVE-2013-5944, upgrade the firmware of the Siemens SCALANCE X-200 switches to version 4.5.0 or higher.
CVE-2013-5944 affects Siemens SCALANCE X-200 switches running firmware versions prior to 4.5.0 and X-200IRT switches running firmware versions before 5.1.0.
Yes, CVE-2013-5944 can be exploited remotely by attackers who can send crafted requests to the management interface.
CVE-2013-5944 poses a risk to network security by allowing unauthorized administrative actions, which can compromise network devices.