« Volver al listado

CVE-2015-1049

Estado: ModificadaMedia (6.8)—

The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Siemens — Scalance X-200 Series Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-1049",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-02-02T15:59:01.973",
  "references": [
    {
      "url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-954136.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-954136.pdf",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-954136.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-954136.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "El servidor web en los swiches Siemens SCALANCE X-200IRT con firmware anterior a 5.2.0 permite a atacantes remotos secuestrar sesiones a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:21:40.697",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:scalance_x-200_series_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "83DB7722-7716-4601-858E-B173DA8E0531",
              "versionEndIncluding": "5.1.1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5F80F736-9673-491E-941B-6CEEF52436D9"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_x201-3pirt:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C17D04A8-1F5C-4640-B9E8-1219981ABF10"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_x202-2irt:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9A48307A-C536-44C2-9C11-2A2CF9005885"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_x202-2p_irt:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4A9A53F3-A699-4055-BC10-6E72196737D4"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A8D7C3AF-FE77-4061-A86B-B4B382CCDB2C"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_x202-4p_irt:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "553CDB8A-FC6C-448B-953A-90ADE6604FBC"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_x204irt:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1981EFE4-5457-4612-B767-573265C2A61B"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_x204irt_pro:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "65F79631-16D1-4D9B-8508-3A605F19BD79"
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xf204irt:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "29123BCB-05C2-46A0-9EBC-5FBFE4E33B03"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}