What’s Vulnerable › Vulnerabilities

CVE-2013-3634

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-05-24 · updated 2026-06-16
• Weakness: CWE-20

Description

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The implementation of SNMPv3 does not check the user credentials sufficiently. Therefore, an attacker is able to execute SNMP commands without correct credentials.

Affected products

• Siemens SCALANCE X200-4P IRT: all versions
• Siemens Scalance X200Irt Firmware: through 5.0.0
• Siemens SCALANCE X201-3P IRT: all versions
• Siemens SCALANCE X202-2IRT: all versions
• Siemens SCALANCE X202-2P IRT: all versions
• Siemens SCALANCE X204IRT: all versions
• Siemens SCALANCE XF204IRT: all versions

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-170686.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-170686.pdf

Get alerted when CVE-2013-3634 or the next vulnerability affects your stack