CVE

Id
55045  
CVE No.
CVE-2012-1802  
Status
Candidate  
Description
Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 before 3.7.2 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a malformed URL.  
Phase
Assigned (20120321)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
575888 55045 CVE-2012-1802 MISC:http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-04.pdf  View
575889 55045 CVE-2012-1802 CONFIRM:http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-130874.pdf  View
575890 55045 CVE-2012-1802 OSVDB:81032  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26368 JVNDB-2012-002075 複数の光洋電子工業社製品の Web サーバにおけるクロスサイトスクリプティングの脆弱性 複数の光洋電子工業社製品の ECOM Ethernet モジュールの Web サーバには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-1807 55045 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002075.html  View