SSA-480829: Cross-Site Scripting Vulnerabilities in SCALANCE X Switches
Two cross-site scripting (XSS) vulnerabilities were identified in the web server of several SCALANCE X switches. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-4848US | medium6.1 | — | ||
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)… | ||||
| CVE-2018-4842US | medium4.8 | — | ||
A vulnerability has been identified in SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7),… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (14)
- MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-200RNA switch family
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-200RNA switch family
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- BehobenSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Update to V5.2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109758142/ - BehobenSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Update to V5.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109758144/ - BehobenSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Update to V5.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109758144/ - BehobenSCALANCE X-200RNA switch family
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - BehobenSCALANCE X-200RNA switch family
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - BehobenSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)
Update to V4.1.3 or later version
https://support.industry.siemens.com/cs/document/109773547/ - BehobenSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)
Update to V4.1.3 or later version
https://support.industry.siemens.com/cs/document/109773547/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan