Siemens Scalance X-200 Series Firmware vulnerabilities

3 CVEs affecting Siemens Scalance X-200 Series Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-1049, published 2015-02-02.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-5944, published 2013-10-03. High severity, CVSS 10.0. EPSS: 3.2% chance of exploitation in the next 30 days. The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which…
• CVE-2013-5709, published 2013-09-17. High severity, CVSS 8.3. EPSS: 3% chance of exploitation in the next 30 days. The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers,…
• CVE-2015-1049, published 2015-02-02. Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days. The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors.