CVE-2013-3634

SCALANCE X-200IRT Firmware < 5.1.0 - Unauthenticated SNMP Command Execution via Insufficient Credential Validation

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The implementation of SNMPv3 does not check the user credentials sufficiently. Therefore, an attacker is able to execute SNMP commands without correct credentials.

References (1)

Core 1
Core References

Scores

EPSS 0.0030
EPSS Percentile 53.0%

Details

CWE
CWE-20
Status published
Products (7)
siemens/scalance_x200-4p_irt
siemens/scalance_x200irt_firmware < 5.0.0
siemens/scalance_x201-3p_irt (2 CPE variants)
siemens/scalance_x202-2irt
siemens/scalance_x202-2p_irt (2 CPE variants)
siemens/scalance_x204irt (2 CPE variants)
siemens/scalance_xf204irt
Published May 24, 2013
Tracked Since Feb 18, 2026