PT-2013-5743

CVE-2013-5709

Published

2013-09-17

Updated

2020-02-10

Description by

CVSS 2.0

8.3

High

MetricsAV:N/AC:M/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Siemens SCALANCE X-200 switches versions prior to 5.0.0

Description The issue concerns the authentication implementation in the web server, which does not utilize a sufficient source of entropy for generating random numbers. This makes it easier for remote attackers to hijack sessions by predicting a value.

Recommendations For versions prior to 5.0.0, update to version 5.0.0 or later to resolve the issue.

Exploitability

Fix

Researchers

Eireann Leverett

Vendors

Affected products

Weakness enumeration

CWE-189

Related identifiers

CVE-2013-5709

Found an issue in the description? Have something to add? Feel free to write us 👾