CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0CVE-2019-6567
https://notcve.org/view.php?id=CVE-2019-6567
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X-414-3E (All versions). The affected devices store passwords in a recoverable format. • https://cert-portal.siemens.com/productcert/pdf/ssa-646841.pdf • CWE-257: Storing Passwords in a Recoverable Format CWE-522: Insufficiently Protected Credentials •
CVSS: 10.0EPSS: 0%CPEs: 5EXPL: 0CVE-2013-5944
https://notcve.org/view.php?id=CVE-2013-5944
The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface. El servidor web integrado en switches Siemens SCALANCE X-200 con firmware anterior a la versión 4.5.0 y switches X-200IRT con firmware anterior a 5.1.0 no aplica adecuadamente los requerimientos de autenticación, lo que permite a atacantes remotos llevar a cabo acciones administrativas a través de peticiones a la interfaz de gestión. • http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-176087.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-176087.pdf • CWE-287: Improper Authentication •