Siemens Scalance X Switches CVE-2014-8479 Denial of Service Vulnerability

Bugtraq ID:	72251
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-8479
Remote:	Yes
Local:	No
Published:	Jan 20 2015 12:00AM
Updated:	Jan 20 2015 12:00AM
Credit:	Deja vu Security
Vulnerable:	Siemens Scalance X408 3.0 Siemens Scalance X-300 Firmware 3.7.2 Siemens Scalance X-300 Firmware 3.7.0 Siemens Scalance X-300 Firmware 3.5.1 Siemens Scalance X-300 Firmware 3.5.0 Siemens Scalance X-300 Firmware 3.3.1 Siemens Scalance X-300 Firmware 3.0.0 Siemens Scalance X-300 Firmware 2.3.1 Siemens Scalance X-300 Firmware 2.2.0
Not Vulnerable:	Siemens Scalance X408 4.0 Siemens Scalance X-300 Firmware 4.0

Siemens Scalance X Switches CVE-2014-8479 Denial of Service Vulnerability

Siemens Scalance X Switches are prone to a denial-of-service vulnerability.

Successfully exploiting this issue allows an attacker to reboot the affected device, denying service to legitimate users.

The following versions are vulnerable:

Scalance X-300 family running firmware versions prior to 4.0
Scalance X408 family running firmware versions prior to 4.0

Siemens Scalance X Switches CVE-2014-8479 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Siemens Scalance X Switches CVE-2014-8479 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.