CVE-2012-1802
High
Description
Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 before 3.7.2 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a malformed URL.
SeverityHigh
CVSS7.8
Exploit probability—
ProductSiemens Scalance X414-3e Firmware
PublishedApr 18, 2012
First seenApr 18, 2012
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens scalance_x414-3e_firmware | v ≤ 3.7.0, 1.2.2, 2.1.1, 2.2.0, 2.3.2, 2.3.3, 3.0.0, 3.0.2, 3.3.0, 3.4.0 | — |
| siemens scalance_x414-3e | No range specified | — |
| siemens scalance_x308-2m_firmware | v ≤ 3.7.0, 3.1.1, 3.5.0, 3.5.2 | — |
| siemens scalance_x308-2m | No range specified | — |
| siemens scalance_x-300eec_firmware | v ≤ 3.7.0, 3.5.0 | — |
| siemens scalance_x-300eec | No range specified | — |
| siemens scalance_xr-300_firmware | v ≤ 3.7.0, 3.1.1, 3.5.0 | — |
| siemens scalance_xr-300 | No range specified | — |
| siemens scalance_x-300_firmware | v ≤ 3.7.0, 2.2.0, 2.3.1, 3.0.0, 3.3.1, 3.5.0, 3.5.1 | — |
| siemens scalance_x-300 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.