Siemens Scalance w788-1rr vulnerabilities

2 CVEs affecting Siemens Scalance w788-1rr, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4652, published 2013-08-01.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-4652, published 2013-08-01. High severity, CVSS 10.0. EPSS: 5.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary…
• CVE-2013-4651, published 2013-08-01. Medium severity, CVSS 6.6. EPSS: 1% chance of exploitation in the next 30 days. Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct…