VulnerabilityModified
CVE-2013-4651
Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by…
MEDIUM 6.6EPSS 0.95%
Does this matter?
Lower severity and a low EPSS score (0.95%). Track it; it rarely justifies an emergency change on its own.
Description
Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.
- CVSS 2.0
- 6.6 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:C
- EPSS
- 0.95% probability · 59th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- siemens/scalance w700 series firmware · siemens/scalance w744-1 · siemens/scalance w744-1pro · siemens/scalance w746-1 · siemens/scalance w746-1pro · siemens/scalance w747-1 · siemens/scalance w747-1rr · siemens/scalance w784-1 · siemens/scalance w784-1rr · siemens/scalance w786-1pro · siemens/scalance w786-2pro · siemens/scalance w786-2rr · siemens/scalance w786-3pro · siemens/scalance w788-1pro · siemens/scalance w788-1rr · siemens/scalance w788-2pro · siemens/scalance w788-2rr
- Source
- cve@mitre.org
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.