CVE-2018-13807
highpriority · track · 35EPSS 0.042 · 91 %ileEURUUSEPSS · scored 2026-10-27
A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SCALANCE X414 (All versions). The web interface on port 443/tcp could allow an attacker to cause a Denial-of-Service condition by sending specially crafted packets to the web server. The device will automatically reboot, impacting network availability for other devices. An attacker must have network access to port 443/tcp to exploit the vulnerability. Neither valid credentials nor interaction by a legitimate user is required to exploit the vulnerability. There is no confidentiality or integrity impact, only availability is temporarily impacted. This vulnerability could be triggered by publicly available tools.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedSCALANCE X-300 switch family (incl. SIPLUS NET variants)cisa_csaf_ot
Update to V4.1.2 https://support.industry.siemens.com/cs/us/en/view/109753720
- FixedSCALANCE X408cisa_csaf_ot
Update to V4.1.2 https://support.industry.siemens.com/cs/us/en/view/109753720
- MitigationSCALANCE X-300 switch family (incl. SIPLUS NET variants)cisa_csaf_ot
Protect network access to the integrated web server on port 443/tcp with appropriate mechanisms: Restrict network access to port 443/tcp to trusted IP addresses, and avoid running vulnerability scanning tools from trusted IP addresses on affected devices.
- MitigationSCALANCE X408cisa_csaf_ot
Protect network access to the integrated web server on port 443/tcp with appropriate mechanisms: Restrict network access to port 443/tcp to trusted IP addresses, and avoid running vulnerability scanning tools from trusted IP addresses on affected devices.
- MitigationSCALANCE X414cisa_csaf_ot
Protect network access to the integrated web server on port 443/tcp with appropriate mechanisms: Restrict network access to port 443/tcp to trusted IP addresses, and avoid running vulnerability scanning tools from trusted IP addresses on affected devices.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (15)
Products and version ranges known to be affected.
- Siemens AG SCALANCE X300, SCALANCE X408, SCALANCE X414SCALANCE X300 : All versions → V4.0.0enisa_euvdEU
- Siemens AG SCALANCE X300, SCALANCE X408, SCALANCE X414SCALANCE X408 : All versions → V4.0.0enisa_euvdEU
- siemens scalance x414 firmwareall versionsnvdUScpe:2.3:o:siemens:scalance_x414_firmware:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-18-254-05Siemens SCALANCE X Switches2018-09-11icsa · cisa_csaf_otUS
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (9)
External citations — patches, advisories, analysis.
- https://cert-portal.siemens.com/productcert/pdf/ssa-447396.pdfcnnvd
- https://ics-cert.us-cert.gov/advisories/ICSA-18-254-05cnnvd
- https://www.securityfocus.com/bid/105331cnnvd
- http://www.securityfocus.com/bid/105331enisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-447396.pdfenisa_euvd
- https://ics-cert.us-cert.gov/advisories/ICSA-18-254-05enisa_euvd
- http://www.securityfocus.com/bid/105331Third Party AdvisoryVDB Entrynvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-447396.pdfVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan