Login Request a demo
Unscored severity · published May 24, 2013
CVE-2013-3634
A vulnerability has been identified in SCALANCE X-200 switch family (incl
–
CVSS
1.5%
EPSS
No
On KEV
Description
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The implementation of SNMPv3 does not check the user credentials sufficiently. Therefore, an attacker is able to execute SNMP commands without correct credentials.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SX
Scalance X200-4p Irt · Siemens
All versions, or not specified · source: NVD
SX
Scalance X200irt Firmware · Siemens
through 5.0.0 · source: NVD
SX
Scalance X201-3p Irt · Siemens
All versions, or not specified · source: NVD
SX
Scalance X202-2irt · Siemens
All versions, or not specified · source: NVD
SX
Scalance X202-2p Irt · Siemens
All versions, or not specified · source: NVD
SX
Scalance X204irt · Siemens
All versions, or not specified · source: NVD
SX
Scalance Xf204irt · Siemens
All versions, or not specified · source: NVD
Affected product
SX
Scalance X200-4p Irt
Siemens
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3634
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3634
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-170686.pdf
More from Scalance X200-4p Irt
6.1
CVE-2022-40631
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT PRO (All versions <…
–
CVE-2013-5709
The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values…
–
CVE-2013-3633
A vulnerability has been identified in SCALANCE X-200 switch family (incl