CVE-2012-1799

The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cret@cert.org

Published

2012-04-18

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Scalance S602 (Siemens)
• Scalance S612 (Siemens)
• Scalance S613 (Siemens)
• Scalance S Firmware (Siemens)

References

• http://osvdb.org/81033
• http://support.automation.siemens.com/WW/view/en/59869684
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdf
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdf