A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1), SCALANCE S623 (All versions < V4.1), SCALANCE S627-2M (All versions < V4.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < 5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < 4.1.3). The device does not send the X-Frame-Option Header in the administrative web interface, which makes it vulnerable to Clickjacking attacks. The security vulnerability could be exploited by an attacker that is able to trick an administrative user with a valid session on the target device into clicking on a website controlled by the attacker. The vulnerability could allow an attacker to perform administrative actions via the web interface.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SCALANCE S602
Vendor
Siemens
Product
SCALANCE S602
Platforms
Unknown
Default status
Unknown
SCALANCE S602 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V4.1
affected
Unavailable
Unavailable
Unavailable
None listed
SCALANCE S612
Vendor
Siemens
Product
SCALANCE S612
Platforms
Unknown
Default status
Unknown
SCALANCE S612 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V4.1
affected
Unavailable
Unavailable
Unavailable
None listed
SCALANCE S623
Vendor
Siemens
Product
SCALANCE S623
Platforms
Unknown
Default status
Unknown
SCALANCE S623 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V4.1
affected
Unavailable
Unavailable
Unavailable
None listed
SCALANCE S627-2M
Vendor
Siemens
Product
SCALANCE S627-2M
Platforms
Unknown
Default status
Unknown
SCALANCE S627-2M · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V4.1
affected
Unavailable
Unavailable
Unavailable
None listed
SCALANCE X-200 switch family (incl. SIPLUS NET variants)
Vendor
Siemens
Product
SCALANCE X-200 switch family (incl. SIPLUS NET variants)
Platforms
Unknown
Default status
Unknown
SCALANCE X-200 switch family (incl. SIPLUS NET variants) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < 5.2.4
affected
Unavailable
Unavailable
Unavailable
None listed
SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Vendor
Siemens
Product
SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Platforms
Unknown
Default status
Unknown
SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V5.5.0
affected
Unavailable
Unavailable
Unavailable
None listed
SCALANCE X-200RNA switch family
Vendor
Siemens
Product
SCALANCE X-200RNA switch family
Platforms
Unknown
Default status
Unknown
SCALANCE X-200RNA switch family · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V3.2.7
affected
Unavailable
Unavailable
Unavailable
None listed
SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)
Vendor
Siemens
Product
SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)
Platforms
Unknown
Default status
Unknown
SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) · Scoped product and version facts