Detections
Analytics
Siemens Scalance Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2012-1802)
critical Tenable OT Security Plugin ID 500751
Synopsis
The remote OT asset is affected by a vulnerability.Description
Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 before 3.7.2 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a malformed URL.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
http://www.nessus.org/u?06c7d73a
http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-04.pdf
Plugin Details
Severity: Critical
ID: 500751
Version: 1.5
Type: remote
Family: Tenable.ot
Published: 1/25/2023
Updated: 9/4/2024
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS Score Source: CVE-2012-1802
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/h:siemens:scalance_x308-2m:-, cpe:/h:siemens:scalance_x414-3e:-
Required KB Items: Tenable.ot/Siemens
Exploit Ease: No known exploits are available
Patch Publication Date: 4/18/2012
Vulnerability Publication Date: 4/18/2012
Reference Information
CVE: CVE-2012-1802