CVE-2014-8479
mediumPriorität · verfolgen · 28EPSS 0.015 · 74. PerzentilEUUSEPSS · bewertet 2026-10-27
The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service (reboot) via crafted FTP packets.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationSCALANCE X-300 switch familycisa_csaf_ot
Siemens provides firmware update V4.0, which fixes the vulnerabilities, and recommends updating as soon as possible. The firmware update is available at: http://support.automation.siemens.com/WW/view/en/107178573 Siemens also recommends protecting network access to all products except for perimeter devices with appropriate mechanisms. It is advised to follow recommended security practices and to configure the environment according to operational guidelines in order to run the devices in a protected IT environment. Siemens operational guidelines are available at: http://www.industry.siemens.com/topics/global/en/industrial-security/Documents/operational_guidelines_industrial_security_en.pdf For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-321046 at the following location: http://www.siemens.com/cert/advisories
- MitigationSCALANCE X408cisa_csaf_ot
Siemens provides firmware update V4.0, which fixes the vulnerabilities, and recommends updating as soon as possible. The firmware update is available at: http://support.automation.siemens.com/WW/view/en/107178573 Siemens also recommends protecting network access to all products except for perimeter devices with appropriate mechanisms. It is advised to follow recommended security practices and to configure the environment according to operational guidelines in order to run the devices in a protected IT environment. Siemens operational guidelines are available at: http://www.industry.siemens.com/topics/global/en/industrial-security/Documents/operational_guidelines_industrial_security_en.pdf For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-321046 at the following location: http://www.siemens.com/cert/advisories
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (7)
Betroffene Produkte und Versionsbereiche.
- siemens scalance x-300 series firmware≤ 3.9.3nvdUScpe:2.3:a:siemens:scalance_x-300_series_firmware:*:*:*:*:*:*:*:*
- siemens scalance x-408 firmware≤ 3.9.3nvdUScpe:2.3:a:siemens:scalance_x-408_firmware:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-15-020-01Siemens SCALANCE X-300/X408 Switch Family DOS Vulnerabilities2015-10-23icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (6)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-321046.pdfcnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-321046.pdfcnnvd
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-321046.pdfenisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-321046.pdfenisa_euvd
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-321046.pdfVendor Advisorynvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-321046.pdfnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan