Siemens Scalance m875 Firmware vulnerabilities

6 CVEs affecting Siemens Scalance m875 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-4861, published 2018-06-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-4860, published 2018-06-26. High severity, CVSS 7.2. EPSS: 3.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could execute arbitrary operating system commands.…
CVE-2018-4859, published 2018-06-26. High severity, CVSS 7.2. EPSS: 3.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could execute arbitrary operating system commands.…
CVE-2018-4861, published 2018-06-26. Medium severity, CVSS 4.9. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could potentially read and download arbitrary files…
CVE-2018-11447, published 2018-06-26. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port 443/tcp could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into…
CVE-2018-11449, published 2018-06-26. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE M875 (All versions). An attacker with access to the local file system might obtain passwords for administrative users. Successful exploitation requires…
CVE-2018-11448, published 2018-06-26. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port 443/tcp could allow a stored Cross-Site Scripting (XSS) attack if an unsuspecting user is tricked into…