Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
AUSCERT Security Bulletin
ASB-2013.0068
A number of vulnerabilities have been identified in Siemens
Scalance X200 IRT Switch Family
28 May 2013
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Siemens Scalance X200 IRT Switches
Operating System: Network Appliance
Impact/Access: Increased Privileges -- Existing Account
Unauthorised Access -- Existing Account
Resolution: Patch/Upgrade
CVE Names: CVE-2013-3634 CVE-2013-3633
Member content until: Thursday, June 27 2013
OVERVIEW
A number of vulnerabilities have been identified in Siemens Scalance
X200 IRT Switch Family. [1]
IMPACT
The vendor hsa provided the following details regarding these
vulnerabilities:
"Vulnerability 1 (CVE-2013-3633)
The user privileges for the web interface are enforced on client side
and not properly verified on server side. Therefore, an attacker is
able to execute privileged commands using an unprivileged account.
CVSS Base Score 8.0
CVSS Temporal Score 6.3
CVSS Overall Score 6.3
(AV:N/AC:L/Au:S/C:P/I:P/A:C/E:POC/RL:OF/RC:C)
Mitigating factors:
The attacker must have network access to the web interface.
According to the operational guidelines for Industrial Security,
Scalance X switches should only be used inside trusted zones." [1]
"Vulnerability 2 (CVE-2013-3634)
The implementation of SNMPv3 does not check the user credentials sufficiently.
Therefore, an attacker is able to execute SNMP commands without correct
credentials.
CVSS Base Score 7.5
CVSS Temporal Score 5.9
CVSS Overall Score 5.9
(AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C)
Mitigating factors:
The attacker has to know a valid user name and must have network access to the
device." [1]
MITIGATION
The vendor recommends that administrators apply the relevant
firmware update to correct these vulnerabilities. [1]
REFERENCES
[1] SSA-170686: Vulnerabilities in Siemens Scalance X200 IRT Switch
Family
http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-170686.pdf
AusCERT has made every effort to ensure that the information contained
in this document is accurate. However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=dK4L
-----END PGP SIGNATURE-----