What’s Vulnerable › Vulnerabilities

CVE-2013-4651

• Severity: medium (CVSS 6.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-08-01 · updated 2026-06-16
• Weakness: CWE-255

Description

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.

Affected products

• Siemens Scalance W700 Series Firmware: through 4.4.0
• Siemens Scalance W744-1: all versions
• Siemens Scalance W744-1Pro: all versions
• Siemens Scalance W746-1: all versions
• Siemens Scalance W746-1Pro: all versions
• Siemens Scalance W747-1: all versions
• Siemens Scalance W747-1Rr: all versions
• Siemens Scalance W784-1: all versions
• Siemens Scalance W784-1Rr: all versions
• Siemens Scalance W786-1Pro: all versions
• Siemens Scalance W786-2Pro: all versions
• Siemens Scalance W786-2Rr: all versions
• Siemens Scalance W786-3Pro: all versions
• Siemens Scalance W788-1Pro: all versions
• Siemens Scalance W788-1Rr: all versions
• Siemens Scalance W788-2Pro: all versions
• Siemens Scalance W788-2Rr: all versions

References

• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf

Get alerted when CVE-2013-4651 or the next vulnerability affects your stack