← Back

CVE-2015-1049

nvd nist
Published: Feb 2, 2015Modified: May 6, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors.

Affected (1)

Siemens
1 product
Scalance X 200 Series Firmware
Configuration A
1 vulnerable · 9 platform
Vulnerable SoftwareAffected Versions
Scalance X 200 Series Firmware
Up to 5.1.1
Running on/withPlatform Versions
Siemens
Scalance X201 3p Irt Pro
All versions
Siemens
Scalance X201 3pirt
All versions
Siemens
Scalance X202 2irt
All versions
Siemens
Scalance X202 2p Irt
All versions
Siemens
Scalance X202 2p Irt Pro
All versions
Siemens
Scalance X202 4p Irt
All versions
Siemens
Scalance X204irt
All versions
Siemens
Scalance X204irt Pro
All versions
Siemens
Scalance Xf204irt
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.