CyberSec.Space Logo
Back to CVE Browser

CVE-2013-5944

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1040%
EPSS Percentile15.01th
PublishedOct 3, 2013
Last ModifiedApr 29, 2026

Vulnerability Description

The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface.

Affected Platforms (CPE)

💻
Siemens

Scalance X 200 Series Firmware

<= 4.4
💻
Siemens

Scalance X 200 Series Firmware

= 4.3
🔌
Siemens

Scalance X 200

All versions
💻
Siemens

Scalance X 200 Series Firmware

<= 5.0.1
🔌
Siemens

Scalance X 200irt

All versions

References & Advisories

🔗 http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-176087.pdf
🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-176087.pdf
🔗 http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-176087.pdf
🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-176087.pdf

Related Vulnerabilities

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...

CVE-2026-121886.3

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules...