Strix
26.1K

CVE-2013-4652

UnknownEPSS 5.92%

Last modified

CVE-2013-4652 is a vulnerability of currently unknown severity. Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a (1) SSH or (2) TELNET connection.. EPSS estimates a 5.92% chance of exploitation in the next 30 days.

Description

Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a (1) SSH or (2) TELNET connection.

Metrics

EPSS Probability
5.92%

92.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
SiemensScalance W700 Series Firmware<= 4.4.0
SiemensScalance W744-1All versions
SiemensScalance W744-1proAll versions
SiemensScalance W746-1All versions
SiemensScalance W746-1proAll versions
SiemensScalance W747-1All versions
SiemensScalance W747-1rrAll versions
SiemensScalance W784-1All versions
SiemensScalance W784-1rrAll versions
SiemensScalance W786-1proAll versions
SiemensScalance W786-2proAll versions
SiemensScalance W786-2rrAll versions
SiemensScalance W786-3proAll versions
SiemensScalance W788-1proAll versions
SiemensScalance W788-1rrAll versions
SiemensScalance W788-2proAll versions
SiemensScalance W788-2rrAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2013-4652?
Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a (1) SSH or (2) TELNET connection.
How severe is CVE-2013-4652?
Severity scoring for CVE-2013-4652 is pending analysis. The EPSS model estimates a 5.92% probability of exploitation in the next 30 days.
How do I fix CVE-2013-4652?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-4652?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST