CVE-2013-5709
17.09.2013, 12:04
The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value.Enginsight
| Vendor | Product | Version |
|---|---|---|
| siemens | scalance_x-200_series_firmware | 𝑥 ≤ 4.4 |
| siemens | scalance_x-200_series_firmware | 4.3 |
| siemens | scalance_x-200 | - |
| siemens | scalance_x-200rna | - |
| siemens | scalance_x200-4p_irt | - |
| siemens | scalance_x201-3p_irt | - |
| siemens | scalance_x201-3p_irt | - |
| siemens | scalance_x202-2irt | - |
| siemens | scalance_x202-2p_irt | - |
| siemens | scalance_x202-2p_irt | - |
| siemens | scalance_x204irt | - |
| siemens | scalance_x204irt | - |
| siemens | scalance_xf-200 | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References