QID 591096

Date Published: 2022-10-11

QID 591096: Siemens SCALANCE M875 Multiple Vulnerabilities (SSA-977428)

AFFECTED PRODUCTS
SCALANCE M875: All versions
Upgrade hardware to SCALANCE M876-4 or RUGGEDCOM RM1224, or follow recommendations from Section Workarounds and Mitigations

QID Detection Logic (Authenticated):
QID checks for the Vulnerable version of using passive scanning

Multiple vulnerabilities have been identified in the web interface of SCALANCE M875. The web interface of SCALANCE M875 could allow Cross-Site Request Forgery (CSRF), stored Cross-Site Scripting (XSS), or command injection attacks if an attacker is authenticated or tricks a legitimate authenticated user into accessing a malicious link

CVSS V3 rated as Critical - 8.8 severity.

CVSS V2 rated as Critical - 9 severity.

Solution

Customers are advised to refer to CERT MITIGATIONS section ssa-977428 for affected packages and patching details.Workaround:
Siemens has identified the following specific workarounds and mitigations that customers can apply to reduce the risk: 1.Restrict access to the web-based management interface to the internal or VPN network. 2.Use the built-in firewall to further restrict access to the web interface to trusted IP addresses if possible. 3.Protect administrative user account with strong passwords. 4.Do not browse other websites and do not click on external links while being authenticated to the administrative web interface.

Vendor References

ssa-977428 - cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf

CVEs related to QID 591096

CVE-2018-4859 | CVE-2018-4860 | CVE-2018-4861 | CVE-2018-11447 | CVE-2018-11448 | CVE-2018-11449 |

Software Advisories

Advisory ID	Software	Component	Link

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].