CVE:CVE-2012-1802
CNNVD:CNNVD-201204-112
Siemens Scalance X Industrial Ethernet switch 在3.7.1前的X414-3E版本,3.7.2之前的X308-2M版本,3.7.2之前的X-300EEC版本,3.7.2之前的XR-300版本,与3.7.2之前的X-300版本中的嵌入式web服务器中存在缓冲区溢出漏洞，远程攻击者借助畸形URL导致拒绝服务（设备重启）或者执行任意代码。
solution:Upgrade siemens scalance_x414-3e_firmware to a higher version than 3.7.0,1.2.2,2.1.1,2.2.0,2.3.2,2.3.3,3.0.0,3.0.2,3.3.0,3.4.0,and avoid the version (,3.7.0],1.2.2,2.1.1,2.2.0,2.3.2,2.3.3,3.0.0,3.0.2,3.3.0,3.4.0; Upgrade siemens scalance_x414-3e to a higher version than -; Upgrade siemens scalance_x308-2m_firmware to a higher version than 3.7.0,3.1.1,3.5.0,3.5.2,and avoid the version (,3.7.0],3.1.1,3.5.0,3.5.2; Upgrade siemens scalance_x308-2m to a higher version than -; Upgrade siemens scalance_x-300eec_firmware to a higher version than 3.7.0,3.5.0,and avoid the version (,3.7.0],3.5.0; Upgrade siemens scalance_x-300eec to a higher version than -; Upgrade siemens scalance_xr-300_firmware to a higher version than 3.7.0,3.1.1,3.5.0,and avoid the version (,3.7.0],3.1.1,3.5.0; Upgrade siemens scalance_xr-300 to a higher version than -; Upgrade siemens scalance_x-300_firmware to a higher version than 3.7.0,2.2.0,2.3.1,3.0.0,3.3.1,3.5.0,3.5.1,and avoid the version (,3.7.0],2.2.0,2.3.1,3.0.0,3.3.1,3.5.0,3.5.1; Upgrade siemens scalance_x-300 to a higher version than -