CVE Feed

    Dashboard / CVE / CVE-2014-8478

    CVE-2014-8478

    The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service (reboot) via malformed HTTP requests.

    Published:Jan 21, 2015
    Last Modified:Apr 12, 2025
    EPS:Jan 21, 2015
    EPSS Score:0.00505
    CVSS Score:7.8

    Affected Products

    Vendor
    Siemens
    Product
    Scalance X-300
    Vendor
    Siemens
    Product
    Scalance X-300 Series Firmware
    Vendor
    Siemens
    Product
    Scalance X-300eec
    Vendor
    Siemens
    Product
    Scalance X-300poe
    Vendor
    Siemens
    Product
    Scalance X-408
    Vendor
    Siemens
    Product
    Scalance X-408 Firmware
    Vendor
    Siemens
    Product
    Scalance Xr-300
    Vendor
    Siemens
    Product
    Scalance Xr-300eec
    Vendor
    Siemens
    Product
    Scalance Xr-300poe

    Exploits

    No exploit reference

    Related CVEs

    CVE-2019-19301 (CVSS 7.5) — A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, S…
    CVE-2019-13946 (CVSS 7.5) — Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multipl…
    CVE-2019-13924 (CVSS 5.4) — A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1…
    CVE-2019-13933 (CVSS 8.6) — A vulnerability has been identified in SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (H…
    CVE-2019-6567 (CVSS 5.5) — A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions …
    CVE-2019-6569 (CVSS 9.1) — The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror p…
    CVE-2014-8479 (CVSS 6.8) — The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with fi…
    CVE-2012-1802 (CVSS 7.8) — Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High