« Volver al listado

CVE-2012-1799

Estado: ModificadaAlta (10)—

The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Siemens — Scalance S602Siemens — Scalance S612Siemens — Scalance S613Siemens — Scalance S Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-1799",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-04-18T10:33:34.887",
  "references": [
    {
      "url": "http://osvdb.org/81033",
      "source": "cret@cert.org"
    },
    {
      "url": "http://support.automation.siemens.com/WW/view/en/59869684",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://osvdb.org/81033",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.automation.siemens.com/WW/view/en/59869684",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password."
    },
    {
      "lang": "es",
      "value": "Ell servidor web en el cortafuegos Siemens Scalance S Security Module S602 V2, S612 V2, and S613 V2 con el firmware anterior a v2.3.0.3 no limita la tasa de intentos de autenticación, lo que hace que sea más fácil para los atacantes remotos obtener acceso a través de un ataque de fuerza bruta sobre la contraseña administrativa."
    }
  ],
  "lastModified": "2026-06-16T23:40:19.657",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:siemens:scalance_s_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6EACCA49-A75D-440B-BA66-95BCAD097A55",
              "versionEndIncluding": "2.3.0"
            },
            {
              "criteria": "cpe:2.3:a:siemens:scalance_s_firmware:2.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E451FF6-96D0-4F3F-A1D3-DAC0D31B9180"
            },
            {
              "criteria": "cpe:2.3:a:siemens:scalance_s_firmware:2.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CDC7B3EB-62BC-427A-AFF9-4A51378FA9B9"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:scalance_s602:v2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBC68DCB-4A60-475F-92EC-8103EA916A48"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_s612:v2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66827C00-1929-4576-88DD-C146C15D7DB4"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_s613:v2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6CCF33D-C441-42FB-9C97-7BFBE56BC00F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}