var-201305-0214
Vulnerability from variot
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The user privileges for the web interface are only enforced on client side and not properly verified on server side. Therefore, an attacker is able to execute privileged commands using an unprivileged account. Siemens Scalance X200 IRT Included in switch firmware Web The interface is vulnerable to arbitrary command execution because authentication relies on client-side authorization checks.An arbitrary command may be executed by a remotely authenticated user. The Siemens Scalance X200 series switches can be used to connect industrial components such as PLCs or HMIs. Note: Limited information is currently available regarding this issue. We will update this BID as more information emerges. There are permissions and access control vulnerabilities in Siemens SCALANCE X-200 versions earlier than V5.0.0 and SCALANCE X-200IRT versions earlier than V5.1.0. The vulnerability stems from the lack of effective permissions and access control measures in network systems or products
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201305-0214", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "scalance x200irt", "scope": "lte", "trust": 1.0, "vendor": "siemens", "version": "5.0.0" }, { "model": "scalance x204irt", "scope": "eq", "trust": 1.0, "vendor": "siemens", "version": null }, { "model": "scalance x202-2irt", "scope": "eq", "trust": 1.0, "vendor": "siemens", "version": null }, { "model": "scalance x202-2p irt", "scope": "eq", "trust": 1.0, "vendor": "siemens", "version": null }, { "model": "scalance x201-3p irt", "scope": "eq", "trust": 1.0, "vendor": "siemens", "version": null }, { "model": "scalance x200-4p irt", "scope": "eq", "trust": 1.0, "vendor": "siemens", "version": null }, { "model": "scalance xf204irt", "scope": "eq", "trust": 1.0, "vendor": "siemens", "version": null }, { "model": "scalance x200 irt", "scope": "lt", "trust": 0.8, "vendor": "siemens", "version": "5.1.0" }, { "model": "scalance x200-4pirt", "scope": null, "trust": 0.8, "vendor": "siemens", "version": null }, { "model": "scalance x201-3p irt", "scope": "eq", "trust": 0.8, "vendor": "siemens", "version": "none" }, { "model": "scalance x201-3p irt", "scope": "eq", "trust": 0.8, "vendor": "siemens", "version": "pro" }, { "model": "scalance x202-2irt", "scope": null, "trust": 0.8, "vendor": "siemens", "version": null }, { "model": "scalance x202-2p irt", "scope": "eq", "trust": 0.8, "vendor": "siemens", "version": "none" }, { "model": "scalance x202-2p irt", "scope": "eq", "trust": 0.8, "vendor": "siemens", "version": "pro" }, { "model": "scalance x204irt", "scope": "eq", "trust": 0.8, "vendor": "siemens", "version": "none" }, { "model": "scalance x204irt", "scope": "eq", "trust": 0.8, "vendor": "siemens", "version": "pro" }, { "model": "scalance xf204irt", "scope": null, "trust": 0.8, "vendor": "siemens", "version": null }, { "model": "scalance series switches", "scope": "eq", "trust": 0.6, "vendor": "siemens", "version": "x-200" }, { "model": "scalance x200irt", "scope": "eq", "trust": 0.6, "vendor": "siemens", "version": "5.0.0" }, { "model": null, "scope": "eq", "trust": 0.4, "vendor": "scalance x204irt", "version": null }, { "model": null, "scope": "eq", "trust": 0.4, "vendor": "scalance x202 2p irt", "version": null }, { "model": null, "scope": "eq", "trust": 0.4, "vendor": "scalance x201 3p irt", "version": null }, { "model": null, "scope": "eq", "trust": 0.2, "vendor": "scalance x202 2irt", "version": null }, { "model": null, "scope": "eq", "trust": 0.2, "vendor": "scalance x200 4p irt", "version": null }, { "model": null, "scope": "eq", "trust": 0.2, "vendor": "scalance xf204irt", "version": null }, { "model": null, "scope": "eq", "trust": 0.2, "vendor": "scalance x200irt", "version": "5.0.0" } ], "sources": [ { "db": "IVD", "id": "eea523d6-2352-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2013-06561" }, { "db": "JVNDB", "id": "JVNDB-2013-002822" }, { "db": "CNNVD", "id": "CNNVD-201305-538" }, { "db": "NVD", "id": "CVE-2013-3633" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/o:siemens:scalance_x200irt_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/h:siemens:scalance_x200-4p_irt", "vulnerable": true }, { "cpe22Uri": "cpe:/h:siemens:scalance_x201-3p_irt", "vulnerable": true }, { "cpe22Uri": "cpe:/h:siemens:scalance_x202-2irt", "vulnerable": true }, { "cpe22Uri": "cpe:/h:siemens:scalance_x202-2p_irt", "vulnerable": true }, { "cpe22Uri": "cpe:/h:siemens:scalance_x204irt", "vulnerable": true }, { "cpe22Uri": "cpe:/h:siemens:scalance_xf204irt", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2013-002822" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "The vendor reported this issue.", "sources": [ { "db": "BID", "id": "60165" } ], "trust": 0.3 }, "cve": "CVE-2013-3633", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "author": "nvd@nist.gov", "availabilityImpact": "COMPLETE", "baseScore": 8.0, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 8.0, "id": "CVE-2013-3633", "impactScore": 8.5, "integrityImpact": "PARTIAL", "severity": "HIGH", "trust": 1.8, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "author": "CNVD", "availabilityImpact": "COMPLETE", "baseScore": 8.0, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 8.0, "id": "CNVD-2013-06561", "impactScore": 8.5, "integrityImpact": "PARTIAL", "severity": "HIGH", "trust": 0.6, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "author": "IVD", "availabilityImpact": "COMPLETE", "baseScore": 8.0, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 8.0, "id": "eea523d6-2352-11e6-abef-000c29c66e3d", "impactScore": 8.5, "integrityImpact": "PARTIAL", "severity": "HIGH", "trust": 0.2, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:C", "version": "2.9 [IVD]" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 8.0, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 8.0, "id": "VHN-63635", "impactScore": 8.5, "integrityImpact": "PARTIAL", "severity": "HIGH", "trust": 0.1, "vectorString": "AV:N/AC:L/AU:S/C:P/I:P/A:C", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2013-3633", "trust": 1.0, "value": "HIGH" }, { "author": "NVD", "id": "CVE-2013-3633", "trust": 0.8, "value": "High" }, { "author": "CNVD", "id": "CNVD-2013-06561", "trust": 0.6, "value": "HIGH" }, { "author": "CNNVD", "id": "CNNVD-201305-538", "trust": 0.6, "value": "HIGH" }, { "author": "IVD", "id": "eea523d6-2352-11e6-abef-000c29c66e3d", "trust": 0.2, "value": "HIGH" }, { "author": "VULHUB", "id": "VHN-63635", "trust": 0.1, "value": "HIGH" } ] } ], "sources": [ { "db": "IVD", "id": "eea523d6-2352-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2013-06561" }, { "db": "VULHUB", "id": "VHN-63635" }, { "db": "JVNDB", "id": "JVNDB-2013-002822" }, { "db": "CNNVD", "id": "CNNVD-201305-538" }, { "db": "NVD", "id": "CVE-2013-3633" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions \u003c V5.0.0 for CVE-2013-3633 and versions \u003c V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.1.0). The user privileges for the web interface are only enforced on client side and not properly verified on server side. Therefore, an attacker is able to execute privileged commands using an unprivileged account. Siemens Scalance X200 IRT Included in switch firmware Web The interface is vulnerable to arbitrary command execution because authentication relies on client-side authorization checks.An arbitrary command may be executed by a remotely authenticated user. The Siemens Scalance X200 series switches can be used to connect industrial components such as PLCs or HMIs. \nNote: Limited information is currently available regarding this issue. We will update this BID as more information emerges. There are permissions and access control vulnerabilities in Siemens SCALANCE X-200 versions earlier than V5.0.0 and SCALANCE X-200IRT versions earlier than V5.1.0. The vulnerability stems from the lack of effective permissions and access control measures in network systems or products", "sources": [ { "db": "NVD", "id": "CVE-2013-3633" }, { "db": "JVNDB", "id": "JVNDB-2013-002822" }, { "db": "CNVD", "id": "CNVD-2013-06561" }, { "db": "BID", "id": "60165" }, { "db": "IVD", "id": "eea523d6-2352-11e6-abef-000c29c66e3d" }, { "db": "VULHUB", "id": "VHN-63635" } ], "trust": 2.7 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2013-3633", "trust": 3.6 }, { "db": "SIEMENS", "id": "SSA-170686", "trust": 1.7 }, { "db": "ICS CERT", "id": "ICSA-13-149-01", "trust": 1.4 }, { "db": "BID", "id": "60165", "trust": 1.0 }, { "db": "CNNVD", "id": "CNNVD-201305-538", "trust": 0.9 }, { "db": "CNVD", "id": "CNVD-2013-06561", "trust": 0.8 }, { "db": "ICS CERT", "id": "ICSA-13-169-01", "trust": 0.8 }, { "db": "JVNDB", "id": "JVNDB-2013-002822", "trust": 0.8 }, { "db": "SECUNIA", "id": "53519", "trust": 0.6 }, { "db": "IVD", "id": "EEA523D6-2352-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "SEEBUG", "id": "SSVID-89660", "trust": 0.1 }, { "db": "VULHUB", "id": "VHN-63635", "trust": 0.1 } ], "sources": [ { "db": "IVD", "id": "eea523d6-2352-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2013-06561" }, { "db": "VULHUB", "id": "VHN-63635" }, { "db": "BID", "id": "60165" }, { "db": "JVNDB", "id": "JVNDB-2013-002822" }, { "db": "CNNVD", "id": "CNNVD-201305-538" }, { "db": "NVD", "id": "CVE-2013-3633" } ] }, "id": "VAR-201305-0214", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "IVD", "id": "eea523d6-2352-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2013-06561" }, { "db": "VULHUB", "id": "VHN-63635" } ], "trust": 1.4751035300000002 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.8 } ], "sources": [ { "db": "IVD", "id": "eea523d6-2352-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2013-06561" } ] }, "last_update_date": "2024-11-23T22:08:30.931000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "SSA-170686", "trust": 0.8, "url": "http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-170686.pdf" }, { "title": "Patch for Siemens Scalance X200 Series Switches Remote Privilege Escalation Vulnerability", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchInfo/show/34436" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2013-06561" }, { "db": "JVNDB", "id": "JVNDB-2013-002822" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-264", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-63635" }, { "db": "JVNDB", "id": "JVNDB-2013-002822" }, { "db": "NVD", "id": "CVE-2013-3633" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.7, "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-170686.pdf" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-3633" }, { "trust": 0.8, "url": "http://ics-cert.us-cert.gov/advisories/icsa-13-149-01" }, { "trust": 0.8, "url": "https://ics-cert.us-cert.gov/advisories/icsa-13-169-01" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-3633" }, { "trust": 0.6, "url": "http://secunia.com/advisories/53519/" }, { "trust": 0.6, "url": "http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-1" }, { "trust": 0.6, "url": "http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-170686.pdf" }, { "trust": 0.6, "url": "https://www.us-cert.gov/ics/advisories/icsa-13-149-01" }, { "trust": 0.3, "url": "http://subscriber.communications.siemens.com/" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2013-06561" }, { "db": "VULHUB", "id": "VHN-63635" }, { "db": "BID", "id": "60165" }, { "db": "JVNDB", "id": "JVNDB-2013-002822" }, { "db": "CNNVD", "id": "CNNVD-201305-538" }, { "db": "NVD", "id": "CVE-2013-3633" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "IVD", "id": "eea523d6-2352-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2013-06561" }, { "db": "VULHUB", "id": "VHN-63635" }, { "db": "BID", "id": "60165" }, { "db": "JVNDB", "id": "JVNDB-2013-002822" }, { "db": "CNNVD", "id": "CNNVD-201305-538" }, { "db": "NVD", "id": "CVE-2013-3633" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2013-06-04T00:00:00", "db": "IVD", "id": "eea523d6-2352-11e6-abef-000c29c66e3d" }, { "date": "2013-06-04T00:00:00", "db": "CNVD", "id": "CNVD-2013-06561" }, { "date": "2013-05-24T00:00:00", "db": "VULHUB", "id": "VHN-63635" }, { "date": "2013-05-24T00:00:00", "db": "BID", "id": "60165" }, { "date": "2013-05-29T00:00:00", "db": "JVNDB", "id": "JVNDB-2013-002822" }, { "date": "2013-05-27T00:00:00", "db": "CNNVD", "id": "CNNVD-201305-538" }, { "date": "2013-05-24T20:55:01.737000", "db": "NVD", "id": "CVE-2013-3633" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2013-06-04T00:00:00", "db": "CNVD", "id": "CNVD-2013-06561" }, { "date": "2019-12-12T00:00:00", "db": "VULHUB", "id": "VHN-63635" }, { "date": "2013-06-19T06:37:00", "db": "BID", "id": "60165" }, { "date": "2013-06-25T00:00:00", "db": "JVNDB", "id": "JVNDB-2013-002822" }, { "date": "2019-12-13T00:00:00", "db": "CNNVD", "id": "CNNVD-201305-538" }, { "date": "2024-11-21T01:54:01.613000", "db": "NVD", "id": "CVE-2013-3633" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201305-538" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Siemens Scalance X200 Series Switch Remote Privilege Escalation Vulnerability", "sources": [ { "db": "IVD", "id": "eea523d6-2352-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2013-06561" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "permissions and access control issues", "sources": [ { "db": "CNNVD", "id": "CNNVD-201305-538" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.