Vulnerability in Siemens Scalance_x-200

CVE-2013-5709

The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attacke…

EPSS: 0.030 (85.6th percentile) — read the EPSS interpretation.

Affected products

Siemens Scalance_x-200
Siemens Scalance_x200-4p_irt
Siemens Scalance_x-200rna
Siemens Scalance_x-200_series_firmware — versions 4.3
Siemens Scalance_x201-3p_irt
Siemens Scalance_x202-2irt
Siemens Scalance_x202-2p_irt
Siemens Scalance_x204irt
Siemens Scalance_xf-200
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (US Government Resource, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM)