What’s Vulnerable › Vulnerabilities

CVE-2013-4652

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-08-01 · updated 2026-06-16

Description

Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a (1) SSH or (2) TELNET connection.

Affected products

• Siemens Scalance W700 Series Firmware: through 4.4.0
• Siemens Scalance W744-1: all versions
• Siemens Scalance W744-1Pro: all versions
• Siemens Scalance W746-1: all versions
• Siemens Scalance W746-1Pro: all versions
• Siemens Scalance W747-1: all versions
• Siemens Scalance W747-1Rr: all versions
• Siemens Scalance W784-1: all versions
• Siemens Scalance W784-1Rr: all versions
• Siemens Scalance W786-1Pro: all versions
• Siemens Scalance W786-2Pro: all versions
• Siemens Scalance W786-2Rr: all versions
• Siemens Scalance W786-3Pro: all versions
• Siemens Scalance W788-1Pro: all versions
• Siemens Scalance W788-1Rr: all versions
• Siemens Scalance W788-2Pro: all versions
• Siemens Scalance W788-2Rr: all versions

References

• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf

Get alerted when CVE-2013-4652 or the next vulnerability affects your stack