CVE-2012-1802: Siemens Scalance X-300

High severity, CVSS 7.8. EPSS: 6.1% chance of exploitation in the next 30 days.

Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 before 3.7.2 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a malformed URL.

Affected products

• Siemens Scalance X-300
• Siemens Scalance X-300 Firmware: up to and including 3.7.0; version 2.2.0 only; version 2.3.1 only; version 3.0.0 only; version 3.3.1 only; version 3.5.0 only; …
• Siemens Scalance X-300eec
• Siemens Scalance X-300eec Firmware: up to and including 3.7.0; version 3.5.0 only
• Siemens Scalance x308-2m
• Siemens Scalance x308-2m Firmware: up to and including 3.7.0; version 3.1.1 only; version 3.5.0 only; version 3.5.2 only
• Siemens Scalance x414-3e
• Siemens Scalance x414-3e Firmware: up to and including 3.7.0; version 1.2.2 only; version 2.1.1 only; version 2.2.0 only; version 2.3.2 only; version 2.3.3 only; …
• Siemens Scalance XR-300
• Siemens Scalance XR-300 Firmware: up to and including 3.7.0; version 3.1.1 only; version 3.5.0 only

Published 2012-04-18. Last modified 2026-06-16.