siemens scalance s615 firmware vulnerabilities and exploits

(subscribe to this query)

The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware prior to 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote malicious users to capture this cookie by intercepting its transmission withi...

Siemens Scalance M-800 Firmware Siemens Scalance S615 Firmware

A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions...

Siemens Ruggedcom Rm1224 Firmware 6.3 Siemens Scalance M-800 Firmware 6.3 Siemens Scalance S615 Firmware 6.3 Siemens Scalance Sc-600 Firmware

A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALAN...

Siemens Ruggedcom Rm1224 Firmware Siemens Scalance M-800 Firmware Siemens Scalance S615 Firmware Siemens Scalance X300wg Firmware Siemens Scalance Xm400 Firmware Siemens Scalance Xr500 Firmware Siemens Scalance Sc622-2c Firmware Siemens Scalance Sc632-2c Firmware Siemens Scalance Sc636-2c Firmware Siemens Scalance Sc642-2c Firmware Siemens Scalance Sc646-2c Firmware Siemens Scalance Xb-200 Firmware Siemens Scalance Xc-200 Firmware Siemens Scalance Xf-200ba Firmware Siemens Scalance Xp-200 Firmware

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (All versions < V7.1.2), SCALANCE M804PB (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (Annex A) (All versions < V7.1.2), SCALANCE M812-1 AD...

Siemens Ruggedcom Rm1224 Firmware Siemens Scalance M804pb Firmware Siemens Scalance M812-1 Firmware Siemens Scalance M816-1 Firmware Siemens Scalance M826-2 Firmware Siemens Scalance M874-2 Firmware Siemens Scalance M874-3 Firmware Siemens Scalance M876-3 Firmware Siemens Scalance M876-4 Firmware Siemens Scalance Mum853-1 Firmware Siemens Scalance Mum856-1 Firmware Siemens Scalance S615 Firmware Siemens Scalance Wam763-1 Firmware Siemens Scalance Wam766-1 Firmware Siemens Scalance Wum763-1 Firmware Siemens Scalance Wum766-1 Firmware

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated malicious user to read from an uninitialized buffer that potentially contains previously allocated data.

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

Affected products do not properly validate the content of uploaded X509 certificates which could allow an attacker with administrative privileges to execute arbitrary code on the device.

Siemens Scalance Xb208 (e/ip) Firmware -Siemens Scalance Xb208 (pn) Firmware -Siemens Scalance Xb216 (e/ip) Firmware -Siemens Scalance Xb216 (pn) Firmware -Siemens Scalance Xc206-2 (sc) Firmware -Siemens Scalance Xc206-2 (st/bfoc) Firmware -Siemens Scalance Xc206-2g Poe Firmware -Siemens Scalance Xc206-2g Poe (54 V Dc) Firmware -Siemens Scalance Xc206-2g Poe Eec (54 V Dc) Firmware -Siemens Scalance Xc206-2sfp Firmware -Siemens Scalance Xc206-2sfp Eec Firmware -Siemens Scalance Xc206-2sfp G Firmware -Siemens Scalance Xc206-2sfp G (eip Def.) Firmware -Siemens Scalance Xc206-2sfp G Eec Firmware -Siemens Scalance Xc208 Firmware -Siemens Scalance Xc208eec Firmware -Siemens Scalance Xc208g Firmware -Siemens Scalance Xc208g (eip Def.) Firmware -Siemens Scalance Xc208g Eec Firmware -Siemens Scalance Xc208g Poe Firmware -Siemens Scalance Xc208g Poe (54 V Dc) Firmware -Siemens Scalance Xc216 Firmware -

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated malicious user to decrypt the contents of the file and retrieve debug information about the system.

Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote malicious user to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook