A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker must be authenticated as administrative user to exploit the security vulnerability. The vulnerability could allow an attacker to execute arbitrary code on the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Siemens |
|
Configuration 1 [-]
| AND |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2018-16646 | A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker must be authenticated as administrative user to exploit the security vulnerability. The vulnerability could allow an attacker to execute arbitrary code on the device. At the time of advisory publication no public exploitation of this security vulnerability was known. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: siemens
Published:
Updated: 2024-09-16T19:45:42.991Z
Reserved: 2018-01-02T00:00:00
Link: CVE-2018-4860
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-06-26T18:29:00.980
Modified: 2024-11-21T04:07:36.213
Link: CVE-2018-4860
Redhat
No data.
OpenCVE Enrichment
No data.