« Volver al listado

CVE-2013-4651

Estado: ModificadaMedia (6.6)—

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (17)

Siemens — Scalance W700 Series FirmwareSiemens — Scalance W744-1Siemens — Scalance W744-1proSiemens — Scalance W746-1Siemens — Scalance W746-1proSiemens — Scalance W747-1Siemens — Scalance W747-1rrSiemens — Scalance W784-1Siemens — Scalance W784-1rrSiemens — Scalance W786-1proSiemens — Scalance W786-2proSiemens — Scalance W786-2rrSiemens — Scalance W786-3proSiemens — Scalance W788-1proSiemens — Scalance W788-1rrSiemens — Scalance W788-2proSiemens — Scalance W788-2rr

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4651",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:C",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "HIGH",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 8.5,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-08-01T13:32:26.067",
  "references": [
    {
      "url": "http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship."
    },
    {
      "lang": "es",
      "value": "Los dispositivos Siemens Scalance W7xx con firmware anterior a 4.5.4 utiliza el certificado X.509 embebido (hardcoded) para distintas instalaciones, lo que facilita a  atacantes remotos llevar a cabo ataques man-in-the-middle contra las sesiones SSL aprovechando las relaciones de confianza del certificado."
    }
  ],
  "lastModified": "2026-06-16T23:57:39.617",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:scalance_w700_series_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80AFB6C8-3330-4E4B-840C-72AB3C25B005",
              "versionEndIncluding": "4.4.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w744-1:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F42D479-A09D-467E-A078-56AC8964FF0A"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w744-1pro:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA38FD9E-6351-4799-9ED9-5C3613304B0D"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w746-1:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BF4620B2-80DA-492E-A3C5-030728AA31E5"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w746-1pro:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73BF204A-FB9B-442B-973B-CFC7400AC88D"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w747-1:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF3D4CCA-26A3-4676-93C0-51C81C878E60"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w747-1rr:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "972DB709-ECDB-4997-B580-68576C9BB068"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w784-1:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BF75780-5A9F-4D46-A057-1A39E06CBA9F"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w784-1rr:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC7D8B71-AC38-4723-A87C-2EE4A3DEB827"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w786-1pro:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE3D27B5-CE66-4C4B-96F5-0F6F1E4AD6D5"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w786-2pro:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9753A6CE-3792-4865-B506-FAD5F9E4F91B"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w786-2rr:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D056894-E0D7-4086-BCBA-817ECB6DD806"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w786-3pro:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E76465BC-A22F-44C8-8474-1848EF0BCFA1"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w788-1pro:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FBFF410E-82DA-4B80-92A5-091970E969FB"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w788-1rr:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F5F0171-F7D9-4657-9CF9-C32CA4FA0902"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w788-2pro:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0AB8DD7E-9CA8-46C4-9CEB-6A5B4E8A8B21"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_w788-2rr:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17A32A22-8C02-47C3-9969-B730C9114691"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}