Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.
| Version | Base score | Base severity | Vector |
|---|---|---|---|
| 3.1 | 2.7 | LOW | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L |
| 4.0 | 5.1 | MEDIUM | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf | x_transferred |
| https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf | x_transferred |
| https://cert-portal.siemens.com/productcert/html/ssa-699386.html | x_transferred |
| https://cert-portal.siemens.com/productcert/html/ssa-180704.html | x_transferred |
| https://cert-portal.siemens.com/productcert/html/ssa-602936.html | x_transferred |
| https://cert-portal.siemens.com/productcert/html/ssa-353002.html | x_transferred |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|
Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.1 | 6.5 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| Secondary | 3.1 | 2.7 | LOW | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L |
| Hyperlink | Source | Resource |
|---|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-180704.html | productcert@siemens.com | N/A |
| https://cert-portal.siemens.com/productcert/html/ssa-353002.html | productcert@siemens.com | N/A |
| https://cert-portal.siemens.com/productcert/html/ssa-602936.html | productcert@siemens.com | N/A |
| https://cert-portal.siemens.com/productcert/html/ssa-699386.html | productcert@siemens.com | N/A |
| https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf | productcert@siemens.com | N/A |
| https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf | productcert@siemens.com | Vendor Advisory |