high7.5
CVE-2013-3634
A vulnerability has been identified in SCALANCE X-200 switch family (incl.
Impact
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The implementation of SNMPv3 does not check the user credentials sufficiently. Therefore, an attacker is able to execute SNMP commands without correct credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Scalance X200irt Firmware | through 5.0.0 |
| Siemens | Scalance X200-4p Irt | All versions |
| Siemens | Scalance X201-3p Irt | All versions |
| Siemens | Scalance X202-2irt | All versions |
| Siemens | Scalance X202-2p Irt | All versions |
| Siemens | Scalance X204irt | All versions |
| Siemens | Scalance Xf204irt | All versions |