Medium severity · published Sep 29, 2016
CVE-2016-7090
The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes…
4.0
CVSS
1.9%
EPSS
No
On KEV
Description
The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SM
Scalance M-800 Firmware · Siemens
through 4.01 · source: NVD
SS
Scalance S615 Firmware · Siemens
through 4.01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-7090
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-7090
www.securityfocus.com
http://www.securityfocus.com/bid/93115
Vendor Advisory
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-342135.pdf
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-16-271-01
More from Scalance M-800 Firmware
9.8
CVE-2017-14491
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response
9.1
CVE-2022-36323
Affected devices do not properly sanitize an input field
8.8
CVE-2021-25667
A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3…
7.5
CVE-2022-36324
Affected devices do not properly handle the renegotiation of SSL/TLS parameters
7.5
CVE-2020-28400
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition