siemens scalance m-800 firmware vulnerabilities and exploits

(subscribe to this query)

The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware prior to 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote malicious users to capture this cookie by intercepting its transmission withi...

Siemens Scalance M-800 Firmware Siemens Scalance S615 Firmware

A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions...

Siemens Ruggedcom Rm1224 Firmware 6.3 Siemens Scalance M-800 Firmware 6.3 Siemens Scalance S615 Firmware 6.3 Siemens Scalance Sc-600 Firmware

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated malicious user to read from an uninitialized buffer that potentially contains previously allocated data.

A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALAN...

Siemens Ruggedcom Rm1224 Firmware Siemens Scalance M-800 Firmware Siemens Scalance S615 Firmware Siemens Scalance X300wg Firmware Siemens Scalance Xm400 Firmware Siemens Scalance Xr500 Firmware Siemens Scalance Sc622-2c Firmware Siemens Scalance Sc632-2c Firmware Siemens Scalance Sc636-2c Firmware Siemens Scalance Sc642-2c Firmware Siemens Scalance Sc646-2c Firmware Siemens Scalance Xb-200 Firmware Siemens Scalance Xc-200 Firmware Siemens Scalance Xf-200ba Firmware Siemens Scalance Xp-200 Firmware

Affected products do not properly validate the content of uploaded X509 certificates which could allow an attacker with administrative privileges to execute arbitrary code on the device.

Siemens Scalance Xb208 (e/ip) Firmware -Siemens Scalance Xb208 (pn) Firmware -Siemens Scalance Xb216 (e/ip) Firmware -Siemens Scalance Xb216 (pn) Firmware -Siemens Scalance Xc206-2 (sc) Firmware -Siemens Scalance Xc206-2 (st/bfoc) Firmware -Siemens Scalance Xc206-2g Poe Firmware -Siemens Scalance Xc206-2g Poe (54 V Dc) Firmware -Siemens Scalance Xc206-2g Poe Eec (54 V Dc) Firmware -Siemens Scalance Xc206-2sfp Firmware -Siemens Scalance Xc206-2sfp Eec Firmware -Siemens Scalance Xc206-2sfp G Firmware -Siemens Scalance Xc206-2sfp G (eip Def.) Firmware -Siemens Scalance Xc206-2sfp G Eec Firmware -Siemens Scalance Xc208 Firmware -Siemens Scalance Xc208eec Firmware -Siemens Scalance Xc208g Firmware -Siemens Scalance Xc208g (eip Def.) Firmware -Siemens Scalance Xc208g Eec Firmware -Siemens Scalance Xc208g Poe Firmware -Siemens Scalance Xc208g Poe (54 V Dc) Firmware -Siemens Scalance Xc216 Firmware -

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote malicious user to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.

Affected devices contain a vulnerability that allows an unauthenticated malicious user to trigger a denial-of-service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that includ...

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook