CVE-2018-4848
mediumpriority · track · 24EPSS 0.010 · 62 %ileDEEURUUSEPSS · scored 2026-10-27
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedSCALANCE X-200 switch family (incl. SIPLUS NET variants)siemens_psirt
Update to V5.2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109758142/ - FixedSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)siemens_psirt
Update to V5.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109758144/ - FixedSCALANCE X-200RNA switch familysiemens_psirt
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - FixedSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)siemens_psirt
Update to V4.1.3 or later version
https://support.industry.siemens.com/cs/document/109773547/ - FixedSCALANCE X-200 switch family (incl. SIPLUS NET variants)cisa_csaf_ot
Update to V5.2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109758142/ - FixedSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)cisa_csaf_ot
Update to V5.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109758144/ - FixedSCALANCE X-200RNA switch familycisa_csaf_ot
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - FixedSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)cisa_csaf_ot
Update to V4.1.3 or later version
https://support.industry.siemens.com/cs/document/109773547/ - MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)siemens_psirt
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)siemens_psirt
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-200RNA switch familysiemens_psirt
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)siemens_psirt
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)cisa_csaf_ot
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)cisa_csaf_ot
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-200RNA switch familycisa_csaf_ot
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
- MitigationSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)cisa_csaf_ot
To exploit CVE-2018-4842, the attacker needs to be able to log into the administrative web application.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (22)
Products and version ranges known to be affected.
- Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)All versions → V5.4.1enisa_euvdEU
- siemens scalance x-200 firmware< 5.2.3nvdUScpe:2.3:h:siemens:scalance_x-200_firmware:*:*:*:*:*:*:*:*
- siemens scalance x-200 irt firmware< 5.4.1nvdUScpe:2.3:o:siemens:scalance_x-200_irt_firmware:*:*:*:*:*:*:*:*
- siemens scalance x300 firmwareall versionsnvdUScpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:*
advisories (2)
Vendor and ecosystem advisories describing this.
- SSA-480829SSA-480829: Cross-Site Scripting Vulnerabilities in SCALANCE X Switches2018-06-12csaf · siemens_psirtDE
Two cross-site scripting (XSS) vulnerabilities were identified in the web server of several SCALANCE X switches. Siemens has released updates for the affected products and recommends to update to the latest versions.
- ICSA-18-163-02Siemens SCALANCE X Switches (Update A)2018-06-12icsa · cisa_csaf_otUS
Two cross-site scripting (XSS) vulnerabilities were identified in the web server of several SCALANCE X switches. Siemens has released updates for the affected products and recommends to update to the latest versions.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdfcnnvd
- https://cert-portal.siemens.com/productcert/txt/ssa-480829.txtPatchcnnvd
- https://www.securityfocus.com/bid/104494cnnvd
- https://www.us-cert.gov/ics/advisories/ICSA-18-163-02cnnvd
- http://www.securityfocus.com/bid/104494enisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdfenisa_euvd
- http://www.securityfocus.com/bid/104494Third Party AdvisoryVDB Entrynvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdfThird Party AdvisoryVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan