Unrated severityNVD Advisory· Published Oct 3, 2013· Updated Apr 29, 2026
CVE-2013-5944
CVE-2013-5944
Description
The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface.
Affected products
4- cpe:2.3:h:siemens:scalance_x-200:-:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_x-200irt:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x-200_series_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:siemens:scalance_x-200_series_firmware:*:*:*:*:*:*:*:*range: <=4.4
- cpe:2.3:o:siemens:scalance_x-200_series_firmware:4.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.