CVE-2018-4848
published 2018-06-14CVE-2018-4848: A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl…
PriorityP425medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
EPSS
0.99%
58.6th percentile
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | scalance_x-200_firmware | < 5.2.3 | 5.2.3 |
| siemens | scalance_x-200_irt_firmware | < 5.4.1 | 5.4.1 |
| siemens | scalance_x-200_switch_family | — | — |
| siemens | scalance_x-200irt_switch_family | — | — |
| siemens | scalance_x-200rna_switch_family | — | — |
| siemens | scalance_x-300_switch_family | — | — |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9g23-gj69-j9g7: A vulnerability has been identified in SCALANCE X-200 switch family (incl
ghsa_unreviewed·2022-05-13
CVE-2018-4848 [MEDIUM] CWE-79 GHSA-9g23-gj69-j9g7: A vulnerability has been identified in SCALANCE X-200 switch family (incl
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). The integrated configuration web server of the affected Scalance X Switches could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it
CISA ICS
Siemens SCALANCE X Switches (Update B)
cisa_ics·2020-01-14·CVSS 6.1
[MEDIUM] Siemens SCALANCE X Switches (Update B)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens SCALANCE X Switches (Update B)
Last RevisedDecember 15, 2022
Alert CodeICSA-18-163-02
## 1. EXECUTIVE SUMMARY
- CVSS v3 5.8
- ATTENTION: Exploitable remotely
- Vendor: Siemens
- Equipment: SCALANCE X switches
- Vulnerabilities: Cross-site Scripting
## 2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-18-163-02 Siemens SCALANCE X Switches that was published January 14, 2020, on the ICS webpage cisa.gov/ics
## 3. RISK EVALUATION
Successful exploitation of these cross-site scripting vulnerabilities could allow an attacke
No detection rules found.
No writeups or analysis indexed.
2018-06-14
Published