Vulnerabilities for Rapidpoint 500 firmware (...) - CXSECURITY.COM

Vulnerabilities for 'Rapidpoint 500 firmware'

2018-06-26

CVE-2018-4846

CWE-798

A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens Healthineers Informatics products), RAPIDLab 1200 Series (All versions < V3.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions >= V3.0 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (V2.4.X_with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions =< V2.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 400 systems (All versions _with_ Siemens Healthineers Informatics products). A factory account with hardcoded password might allow attackers access to the device over port 5900/tcp. Successful exploitation requires no user interaction or privileges and impacts the confidentiality, integrity, and availability of the affected device. At the time of advisory publication, no public exploitation of this security vulnerability is known. Siemens Healthineers confirms the security vulnerability and provides mitigations to resolve the security issue.

CVE-2018-4845

CWE-269

A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens Healthineers Informatics products), RAPIDLab 1200 Series (All versions < V3.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions >= V3.0 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (V2.4.X_with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions =< V2.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 400 systems (All versions _with_ Siemens Healthineers Informatics products). Remote attackers with either local or remote credentialed access to the "Remote View" feature might be able to elevate their privileges, compromising confidentiality, integrity, and availability of the system. No special skills or user interaction are required to perform this attack. At the time of advisory publication, no public exploitation of this security vulnerability is known. Siemens Healthineers confirms the security vulnerability and provides mitigations to resolve the security issue.

>>> Vendor: Siemens 653 Products

Speedstream wireless router

Gigaset se361 wlan router

Speedstream 6520

Speedstream 5200

Gigaset wlan camera

Gigaset c450 ip

Gigaset c475 ip

Gigaset se461 wimax router

Simatic wincc flexible runtime

Simatic wincc runtime

Tecnomatix factorylink

Simatic hmi panels

Wincc flexible runtime

Wincc runtime advanced

Automation license manager

Scalance s firmware

Scalance x-300 firmware

Scalance x-300eec firmware

Scalance x308-2m firmware

Scalance x414-3e firmware

Scalance xr-300 firmware

Scalance x-300eec

Scalance x308-2m

Scalance x414-3e

Scalance xr-300

Simatic s7-400 cpu 412-2 pn

Simatic s7-400 cpu 414-3 pn/dp

Simatic s7-400 cpu 414f-3 pn/dp

Simatic s7-400 cpu 416-3 pn/dp

Simatic s7-400 cpu 416f-3 pn/dp

Simatic s7-400 cpu firmware

Synco ozw web server

Synco ozw web server firmware

Simatic s7-1200 plc

Sipass integrated

Simatic rf-manager

Simatic rf-manager 2008

Wincc tia portal

Scalance x204irt

Scalance x202-2irt

Scalance x202-2p irt

Scalance x201-3p irt

Scalance x200-4p irt

Scalance xf204irt

Scalance x200irt firmware

Openscape session border controller

Enterprise openscape branch

Scalance w744-1

Scalance w744-1pro

Scalance w746-1

Scalance w746-1pro

Scalance w747-1

Scalance w747-1rr

Scalance w784-1

Scalance w784-1rr

Scalance w786-1pro

Scalance w786-2pro

Scalance w786-2rr

Scalance w786-3pro

Scalance w788-1pro

Scalance w788-1rr

Scalance w788-2pro

Scalance w788-2rr

Scalance w700 series firmware

Scalance x-200rna

Scalance xf-200

Scalance x-200 series firmware

See all Products for Vendor Siemens

Copyright 2024, cxsecurity.com