Unrated severityNVD Advisory· Published Aug 1, 2013· Updated Jun 16, 2026
CVE-2013-4651
CVE-2013-4651
Description
Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
18cpe:2.3:h:siemens:scalance_w744-1:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:siemens:scalance_w744-1:-:*:*:*:*:*:*:*
- (no CPE)range: <4.5.4
- cpe:2.3:h:siemens:scalance_w744-1pro:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_w746-1:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:siemens:scalance_w746-1:-:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_w746-1pro:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_w747-1:-:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:h:siemens:scalance_w747-1:-:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_w747-1rr:-:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_w784-1:-:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_w784-1rr:-:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_w786-1pro:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_w786-2pro:-:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:h:siemens:scalance_w786-2pro:-:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_w788-1pro:-:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_w788-1rr:-:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_w788-2pro:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_w786-2rr:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:siemens:scalance_w786-2rr:-:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_w788-2rr:-:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_w786-3pro:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:scalance_w700_series_firmware:*:*:*:*:*:*:*:*Range: <=4.4.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.