Medium SSA-480829 2 CVEs

SSA-480829: Cross-Site Scripting Vulnerabilities in SCALANCE X Switches

Published Jun 12, 2018 · Updated Dec 13, 2022 · Revision 3

Vendor: Siemens Product: SCALANCE X-200 switch family (incl. SIPLUS NET variants) Product: SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) Product: SCALANCE X-200RNA switch family Product: SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)

Summary

Two cross-site scripting (XSS) vulnerabilities were identified in the web server of several SCALANCE X switches.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 2

Unscored —

CVE-2018-4842

A vulnerability has been identified in SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4…

Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) SCALANCE X-200RNA switch family ICS / OT

Jun 14, 2018
Unscored —

CVE-2018-4848

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3)…

Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) SCALANCE X-200 switch family (incl. SIPLUS NET variants) SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) ICS / OT

Jun 14, 2018

Revision history

2022-12-13 #3
Added SCALANCE X-200RNA switch family
2020-01-14 #2
SIPLUS devices now explicitly mentioned in the list of affected products; added update information for SCALANCE X-300/X408
2018-06-12 #1
Publication Date

References

SSA-480829: Cross-Site Scripting Vulnerabilities in SCALANCE X Switches - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdf
SSA-480829: Cross-Site Scripting Vulnerabilities in SCALANCE X Switches - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-480829.txt