Lucene search
HistoryJan 21, 2015 - 5:59 p.m.
CVE-2014-8478
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.7
Confidence
High
EPSS
0.002
Percentile
64.4%
The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service (reboot) via malformed HTTP requests.
Affected configurations
Node
siemensscalance_x-300_series_firmwareRange≤3.9.3
siemensscalance_x-300Match-
ORsiemensscalance_x-300eecMatch-
ORsiemensscalance_x-300poeMatch-
ORsiemensscalance_xr-300Match-
ORsiemensscalance_xr-300eecMatch-
ORsiemensscalance_xr-300poeMatch-
Node
siemensscalance_x-408_firmwareRange≤3.9.3
siemensscalance_x-408
| Vendor | Product | Version | CPE |
|---|---|---|---|
| siemens | scalance_x-300_series_firmware | * | cpe:2.3:a:siemens:scalance_x-300_series_firmware:*:*:*:*:*:*:*:* |
| siemens | scalance_x-300 | - | cpe:2.3:h:siemens:scalance_x-300:-:*:*:*:*:*:*:* |
| siemens | scalance_x-300eec | - | cpe:2.3:h:siemens:scalance_x-300eec:-:*:*:*:*:*:*:* |
| siemens | scalance_x-300poe | - | cpe:2.3:h:siemens:scalance_x-300poe:-:*:*:*:*:*:*:* |
| siemens | scalance_xr-300 | - | cpe:2.3:h:siemens:scalance_xr-300:-:*:*:*:*:*:*:* |
| siemens | scalance_xr-300eec | - | cpe:2.3:h:siemens:scalance_xr-300eec:-:*:*:*:*:*:*:* |
| siemens | scalance_xr-300poe | - | cpe:2.3:h:siemens:scalance_xr-300poe:-:*:*:*:*:*:*:* |
| siemens | scalance_x-408_firmware | * | cpe:2.3:a:siemens:scalance_x-408_firmware:*:*:*:*:*:*:*:* |
| siemens | scalance_x-408 | * | cpe:2.3:h:siemens:scalance_x-408:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2015-01-21 17:59:00
cve
cve
CVE-2014-8478
2015-01-21 17:59:00
cvelist
cvelist
CVE-2014-8478
2015-01-21 17:00:00
ics
ics
Siemens SCALANCE X-300/X408 Switch Family DOS Vulnerabilities
2018-08-29 12:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.7
Confidence
High
EPSS
0.002
Percentile
64.4%
Related for NVD:CVE-2014-8478