CVE-2013-4652
Summary
| CVE | CVE-2013-4652 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-08-01 13:32:26 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a (1) SSH or (2) TELNET connection. |
Risk And Classification
Primary CVSS: v2.0 10 from [email protected]
AV:N/AC:L/Au:N/C:C/I:C/A:C
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Siemens | Scalance W700 Series Firmware | All | All | All | All |
| Hardware | Siemens | Scalance W744-1 | - | All | All | All |
| Hardware | Siemens | Scalance W744-1pro | - | All | All | All |
| Hardware | Siemens | Scalance W746-1 | - | All | All | All |
| Hardware | Siemens | Scalance W746-1pro | - | All | All | All |
| Hardware | Siemens | Scalance W747-1 | - | All | All | All |
| Hardware | Siemens | Scalance W747-1rr | - | All | All | All |
| Hardware | Siemens | Scalance W784-1 | - | All | All | All |
| Hardware | Siemens | Scalance W784-1rr | - | All | All | All |
| Hardware | Siemens | Scalance W786-1pro | - | All | All | All |
| Hardware | Siemens | Scalance W786-2pro | - | All | All | All |
| Hardware | Siemens | Scalance W786-2rr | - | All | All | All |
| Hardware | Siemens | Scalance W786-3pro | - | All | All | All |
| Hardware | Siemens | Scalance W788-1pro | - | All | All | All |
| Hardware | Siemens | Scalance W788-1rr | - | All | All | All |
| Hardware | Siemens | Scalance W788-2pro | - | All | All | All |
| Hardware | Siemens | Scalance W788-2rr | - | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Siemens | af854a3a-2127-422b-91ae-364da2661108 | www.siemens.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 591397 Siemens Scalance W-7xx (a/b/g) Product Family Improper Authentication Multiple Vulnerabilities (SSA-120908, icsa-13-213-01)