Approved changes feed: RSS · Atom

cpe:2.3:h:siemens:scalance_x204irt:-:-:pro:*:*:*:*:*

part: h version: - update: -

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductScalance X204Irt (3feebd61-be9a-5b5a-8946-0e5e63ee5d95)
Editionpro
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5709 vulnerable 2026-06-08 05:04:53.258282 Details available
The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value.
Published: 2013-09-17T10:00:00.000Z
Updated: 2024-08-06T17:22:31.062Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3634 vulnerable 2026-06-08 05:04:32.428268 Details available
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The implementation of SNMPv3 does not check the user credentials sufficiently. Therefore, an attacker is able to execute SNMP commands without correct credentials.
Published: 2013-05-24T20:00:00.000Z
Updated: 2024-08-06T16:14:56.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3633 vulnerable 2026-06-08 05:04:32.427203 Details available
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The user privileges for the web interface are only enforced on client side and not properly verified on server side. Therefore, an attacker is able to execute privileged commands using an unprivileged account.
Published: 2013-05-24T20:00:00.000Z
Updated: 2024-08-06T16:14:56.558Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.