description: Affected devices do not properly validate the authentication when performing certain modifications in the web interface allowing an authenticated attacker to influence the user interface configured by an administrator.
problem types: CWE-425: Direct Request ('Forced Browsing')
affected:
{
vendor: Siemens
product: RUGGEDCOM RM1224 LTE(4G) EU
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RM1224 LTE(4G) NAM
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M804PB
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M812-1 ADSL-Router (Annex A)
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M812-1 ADSL-Router (Annex B)
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M816-1 ADSL-Router (Annex A)
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M816-1 ADSL-Router (Annex B)
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M826-2 SHDSL-Router
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M874-2
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M874-3
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-3 (EVDO)
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-3 (ROK)
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-4
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-4 (EU)
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE M876-4 (NAM)
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE MUM853-1 (EU)
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE MUM856-1 (EU)
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE MUM856-1 (RoW)
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE S615
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE S615 EEC
versions:
status: affected, version: All versions
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC622-2C
versions:
status: affected, version: 0, lessThan: V3.1, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC626-2C
versions:
status: affected, version: 0, lessThan: V3.1, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC632-2C
versions:
status: affected, version: 0, lessThan: V3.1, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC636-2C
versions:
status: affected, version: 0, lessThan: V3.1, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC642-2C
versions:
status: affected, version: 0, lessThan: V3.1, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE SC646-2C
versions:
status: affected, version: 0, lessThan: V3.1, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB205-3 (SC, PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB205-3 (ST, E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB205-3 (ST, E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB205-3 (ST, PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB205-3LD (SC, E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB205-3LD (SC, PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB208 (E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB208 (PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB213-3 (SC, E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB213-3 (SC, PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB213-3 (ST, E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB213-3 (ST, PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB213-3LD (SC, E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB213-3LD (SC, PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB216 (E/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XB216 (PN)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2 (SC)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2 (ST/BFOC)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2G PoE
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2G PoE (54 V DC)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2G PoE EEC (54 V DC)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2SFP
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2SFP EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2SFP G
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2SFP G (EIP DEF.)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC206-2SFP G EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208G
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208G (EIP def.)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208G EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208G PoE
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC208G PoE (54 V DC)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216-3G PoE
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216-3G PoE (54 V DC)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216-4C
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216-4C G
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216-4C G (EIP Def.)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216-4C G EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC216EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC224
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC224-4C G
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC224-4C G (EIP Def.)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XC224-4C G EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XF204
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XF204 DNA
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XF204-2BA
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XF204-2BA DNA
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP208
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP208 (Ethernet/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP208EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP208PoE EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP216
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP216 (Ethernet/IP)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP216EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XP216POE EEC
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR324WG (24 x FE, AC 230V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR324WG (24 X FE, DC 24V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR326-2C PoE WG
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR326-2C PoE WG (without UL)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR328-4C WG (24XFE, 4XGE, 24V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR328-4C WG (28xGE, AC 230V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SCALANCE XR328-4C WG (28xGE, DC 24V)
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET SCALANCE XC206-2
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET SCALANCE XC206-2SFP
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET SCALANCE XC208
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: SIPLUS NET SCALANCE XC216-4C
versions:
status: affected, version: 0, lessThan: V4.5, versionType: custom
defaultStatus: unknown
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
baseScore: 4.3
baseSeverity: MEDIUM
]