CVE-2013-5709

Published: Sep 17, 2013Modified: Apr 29, 2026

8.3

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:C

Exploitability: 8.6 / Impact: 8.5

Source: NVD

Description

The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value.

Affected (13)

Products: Siemens: Scalance X 200 Series Firmware, Scalance X 200, Scalance X 200rna, Scalance X200 4p Irt, Scalance X201 3p Irt, Scalance X202 2irt, Scalance X202 2p Irt, Scalance X204irt, Scalance Xf 200

Siemens

9 products

Scalance X 200 Series Firmware

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Siemens Scalance X 200 Series Firmware	Up to 4.4
Siemens Scalance X 200 Series Firmware	Version 4.3
Siemens Scalance X 200	All versions
Siemens Scalance X 200rna	All versions
Siemens Scalance X200 4p Irt	All versions
Siemens Scalance X201 3p Irt	All versions
Siemens Scalance X201 3p Irt	All versions
Siemens Scalance X202 2irt	All versions
Siemens Scalance X202 2p Irt	All versions
Siemens Scalance X202 2p Irt	All versions
Siemens Scalance X204irt	All versions
Siemens Scalance X204irt	All versions
Siemens Scalance Xf 200	All versions