CVE-2013-4651

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.

Score

CVSS 2.0 6.6 Medium

Status

Modified - cve@mitre.org

Published

2013-08-01

Last modified

2024-09-17

Weaknesses

CWE-255

Affected products

• Scalance W700 Series Firmware (Siemens)
• Scalance W744-1 (Siemens)
• Scalance W744-1pro (Siemens)
• Scalance W746-1 (Siemens)
• Scalance W746-1pro (Siemens)
• Scalance W747-1 (Siemens)
• Scalance W747-1rr (Siemens)
• Scalance W784-1 (Siemens)
• Scalance W784-1rr (Siemens)
• Scalance W786-1pro (Siemens)
• Scalance W786-2pro (Siemens)
• Scalance W786-2rr (Siemens)
• Scalance W786-3pro (Siemens)
• Scalance W788-1pro (Siemens)
• Scalance W788-1rr (Siemens)
• Scalance W788-2pro (Siemens)
• Scalance W788-2rr (Siemens)

References

• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf