Siemens Scalance X-200 vulnerabilities

2 CVEs affecting Siemens Scalance X-200, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5944, published 2013-10-03.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-5944, published 2013-10-03. High severity, CVSS 10.0. EPSS: 3.2% chance of exploitation in the next 30 days. The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which…
• CVE-2013-5709, published 2013-09-17. High severity, CVSS 8.3. EPSS: 3% chance of exploitation in the next 30 days. The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers,…