Siemens SCALANCE X-408 Administrative Web Interface ui layer

Summaryinfo

A vulnerability was found in Siemens SCALANCE X-200, SCALANCE X-200IRT, SCALANCE X-300 and SCALANCE X-408 and classified as critical. This impacts an unknown function of the component Administrative Web Interface. Such manipulation leads to ui layer. This vulnerability is uniquely identified as CVE-2019-13924. The attack can be launched remotely. No exploit exists.

Detailsinfo

A vulnerability was found in Siemens SCALANCE X-200, SCALANCE X-200IRT, SCALANCE X-300 and SCALANCE X-408 (the affected version is unknown) and classified as critical. Affected by this issue is an unknown code of the component Administrative Web Interface. The manipulation with an unknown input leads to a ui layer vulnerability. Using CWE to declare the problem leads to CWE-1021. The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. Impacted is confidentiality, integrity, and availability. CVE summarizes:

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (all versions < 5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (all versions < 4.1.3). The device does not send the X-Frame-Option Header in the administrative web interface, which makes it vulnerable to Clickjacking attacks. The security vulnerability could be exploited by an attacker that is able to trick an administrative user with a valid session on the target device into clicking on a website controlled by the attacker. The vulnerability could allow an attacker to perform administrative actions via the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.

The weakness was disclosed 02/11/2020. This vulnerability is handled as CVE-2019-13924 since 07/18/2019. The attack may be launched remotely. No form of authentication is required for exploitation. Successful exploitation requires user interaction by the victim. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $5k-$25k (estimation calculated on 02/12/2020).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Siemens

Name

• SCALANCE X-200
• SCALANCE X-200IRT
• SCALANCE X-300
• SCALANCE X-408

License

• commercial

Website

• Vendor: https://www.siemens.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion