Siemens Scalance s613 vulnerabilities

3 CVEs affecting Siemens Scalance s613, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-3963, published 2016-04-08.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-3963, published 2016-04-08. Medium severity, CVSS 5.3. EPSS: 8.6% chance of exploitation in the next 30 days. Siemens SCALANCE S613 allows remote attackers to cause a denial of service (web-server outage) via traffic to TCP port 443.
• CVE-2012-1799, published 2012-04-18. High severity, CVSS 10.0. EPSS: 5% chance of exploitation in the next 30 days. The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier…
• CVE-2012-1800, published 2012-04-18. Medium severity, CVSS 6.1. EPSS: 1.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote…