Lucene search
MitreCVE-2014-8479HistoryJan 21, 2015 - 5:59 p.m.
CVE-2014-8479
2015-01-2117:59:01
CWE-20
mitre
web.nvd.nist.gov
30
siemens
scalance
x-300
x-408
switches
firmware
ftp
server
dos
reboot
vulnerability
cve-2014-8479
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:N/A:C
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
55.3%
The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service (reboot) via crafted FTP packets.
Affected configurations
Node
siemensscalance_x-408_firmwareRange≤3.9.3
siemensscalance_x-408
Node
siemensscalance_x-300_series_firmwareRange≤3.9.3
siemensscalance_x-300Match-
ORsiemensscalance_x-300eecMatch-
ORsiemensscalance_x-300poeMatch-
ORsiemensscalance_xr-300Match-
ORsiemensscalance_xr-300eecMatch-
ORsiemensscalance_xr-300poeMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| siemens | scalance_x-408_firmware | * | cpe:2.3:a:siemens:scalance_x-408_firmware:*:*:*:*:*:*:*:* |
| siemens | scalance_x-408 | * | cpe:2.3:h:siemens:scalance_x-408:*:*:*:*:*:*:*:* |
| siemens | scalance_x-300_series_firmware | * | cpe:2.3:a:siemens:scalance_x-300_series_firmware:*:*:*:*:*:*:*:* |
| siemens | scalance_x-300 | - | cpe:2.3:h:siemens:scalance_x-300:-:*:*:*:*:*:*:* |
| siemens | scalance_x-300eec | - | cpe:2.3:h:siemens:scalance_x-300eec:-:*:*:*:*:*:*:* |
| siemens | scalance_x-300poe | - | cpe:2.3:h:siemens:scalance_x-300poe:-:*:*:*:*:*:*:* |
| siemens | scalance_xr-300 | - | cpe:2.3:h:siemens:scalance_xr-300:-:*:*:*:*:*:*:* |
| siemens | scalance_xr-300eec | - | cpe:2.3:h:siemens:scalance_xr-300eec:-:*:*:*:*:*:*:* |
| siemens | scalance_xr-300poe | - | cpe:2.3:h:siemens:scalance_xr-300poe:-:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2015-01-21 17:59:00
cvelist
cvelist
CVE-2014-8479
2015-01-21 17:00:00
nvd
nvd
CVE-2014-8479
2015-01-21 17:59:01
ics
ics
Siemens SCALANCE X-300/X408 Switch Family DOS Vulnerabilities
2018-08-29 12:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:N/A:C
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
55.3%
Related for CVE-2014-8479