What is the CVSS score of CVE-2013-3633?

CVE-2013-3633 has a CVSS 2.0 base score of 8.0 (High). CVSS vector: AV:N/AC:L/Au:S/C:P/I:P/A:C. EPSS exploitation probability: 0.4%.

Scalance X200Irt Firmware CVE-2013-3633

HIGH

Permissions, Privileges, and Access Controls (CWE-264)

2013-05-24 cve@mitre.org

Privilege Escalation Siemens Scalance X200Irt Firmware Scalance X200 4P Irt Scalance X201 3P Irt Scalance X202 2Irt Scalance X202 2P Irt Scalance X204Irt Scalance Xf204Irt

8.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

8.0 HIGH

AV:N/AC:L/Au:S/C:P/I:P/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:S/C:P/I:P/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

May 24, 2013 - 20:55 cve.org

HIGH 8.0

DescriptionCVE.org

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The user privileges for the web interface are only enforced on client side and not properly verified on server side. Therefore, an attacker is able to execute privileged commands using an unprivileged account.

AnalysisAI

A vulnerability has been identified in SCALANCE X-200 switch family (incl. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The user privileges for the web interface are only enforced on client side and not properly verified on server side. Therefore, an attacker is able to execute privileged commands using an unprivileged account. Affected products include: Siemens Scalance X200Irt Firmware, Siemens Scalance X200-4P Irt, Siemens Scalance X201-3P Irt, Siemens Scalance X202-2Irt, Siemens Scalance X202-2P Irt.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.