CyberSec.Space Logo
Back to CVE Browser

CVE-2013-5709

HIGH
8.3
CVSS Severity Score
EPSS Score0.1830%
EPSS Percentile27.77th
PublishedSep 17, 2013
Last ModifiedApr 29, 2026

Vulnerability Description

The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value.

Affected Platforms (CPE)

πŸ’»
Siemens

Scalance X 200 Series Firmware

<= 4.4
πŸ’»
Siemens

Scalance X 200 Series Firmware

= 4.3
πŸ”Œ
Siemens

Scalance X 200

All versions
πŸ”Œ
Siemens

Scalance X 200rna

All versions
πŸ”Œ
Siemens

Scalance X200 4p Irt

All versions
πŸ”Œ
Siemens

Scalance X201 3p Irt

All versions
πŸ”Œ
Siemens

Scalance X201 3p Irt

All versions
πŸ”Œ
Siemens

Scalance X202 2irt

All versions
πŸ”Œ
Siemens

Scalance X202 2p Irt

All versions
πŸ”Œ
Siemens

Scalance X202 2p Irt

All versions
πŸ”Œ
Siemens

Scalance X204irt

All versions
πŸ”Œ
Siemens

Scalance X204irt

All versions
πŸ”Œ
Siemens

Scalance Xf 200

All versions

References & Advisories

Related Vulnerabilities