CVE Feed

    Dashboard / CVE / CVE-2012-1802

    CVE-2012-1802

    Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 before 3.7.2 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a malformed URL.

    Published:Apr 18, 2012
    Last Modified:Apr 11, 2025
    EPS:Apr 18, 2012
    EPSS Score:0.03886
    CVSS Score:7.8

    Affected Products

    Vendor
    Siemens
    Product
    Scalance X-300
    Vendor
    Siemens
    Product
    Scalance X-300 Firmware
    Vendor
    Siemens
    Product
    Scalance X-300eec
    Vendor
    Siemens
    Product
    Scalance X-300eec Firmware
    Vendor
    Siemens
    Product
    Scalance X308-2m
    Vendor
    Siemens
    Product
    Scalance X308-2m Firmware
    Vendor
    Siemens
    Product
    Scalance X414-3e
    Vendor
    Siemens
    Product
    Scalance X414-3e Firmware
    Vendor
    Siemens
    Product
    Scalance Xr-300
    Vendor
    Siemens
    Product
    Scalance Xr-300 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2019-19301 (CVSS 7.5) — A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, S…
    CVE-2019-13946 (CVSS 7.5) — Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multipl…
    CVE-2019-13924 (CVSS 5.4) — A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1…
    CVE-2019-13933 (CVSS 8.6) — A vulnerability has been identified in SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (H…
    CVE-2019-6567 (CVSS 5.5) — A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions …
    CVE-2019-6569 (CVSS 9.1) — The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror p…
    CVE-2014-8479 (CVSS 6.8) — The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with fi…
    CVE-2014-8478 (CVSS 7.8) — The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with fi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High