medium6.6
CVE-2013-4651
Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it eas…
Impact
Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Scalance W700 Series Firmware | through 4.4.0 |
| Siemens | Scalance W744-1 | All versions |
| Siemens | Scalance W744-1pro | All versions |
| Siemens | Scalance W746-1 | All versions |
| Siemens | Scalance W746-1pro | All versions |
| Siemens | Scalance W747-1 | All versions |
| Siemens | Scalance W747-1rr | All versions |
| Siemens | Scalance W784-1 | All versions |
| Siemens | Scalance W784-1rr | All versions |
| Siemens | Scalance W786-1pro | All versions |
| Siemens | Scalance W786-2pro | All versions |
| Siemens | Scalance W786-2rr | All versions |