Read the docs
TI-2018-03425 Aliases CVE-2018-4848GHSA-9g23-gj69-j9g7

Cross-site scripting in Siemens SCALANCE X-200 switch family

Priority LOW 29CWE-80Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-80.

Summary

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it.

Why it matters now

EPSS 0.00987 62nd percentileScored 2026-11-07
Fix Fixed SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Siemens): V5.2.3SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (Siemens): V5.4.1+2 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSCALANCE X-200 switch family (incl. SIPLUS NET variants)before V5.2.3V5.2.3Patch availableCNA
SiemensSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)before V5.4.1V5.4.1Patch availableCNA
SiemensSCALANCE X-200RNA switch familybefore V3.2.7V3.2.7Patch availableCNA
SiemensSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)before V4.1.3V4.1.3Patch availableCNA
  • SCALANCE X-200 switch family (incl. SIPLUS NET variants) VendorSiemens Affected before V5.2.3 Fixed in V5.2.3 Patch available CNA
  • SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) VendorSiemens Affected before V5.4.1 Fixed in V5.4.1 Patch available CNA
  • SCALANCE X-200RNA switch family VendorSiemens Affected before V3.2.7 Fixed in V3.2.7 Patch available CNA
  • SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x-200_irt_firmware:*:*:*:*:*:*:*:*before 5.4.1VulnerableSiemens
cpe:2.3:h:siemens:scalance_x-200_irt:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_x-200_firmware:*:*:*:*:*:*:*:*before 5.2.3VulnerableSiemens
cpe:2.3:h:siemens:scalance_x-200:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x-200_irt_firmware:*:*:*:*:*:*:*:* Versions before 5.4.1 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x-200_irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_x-200_firmware:*:*:*:*:*:*:*:* Versions before 5.2.3 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

  • Fix · CNA SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Siemens) Fixed in V5.2.3
  • Fix · CNA SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (Siemens) Fixed in V5.4.1
  • Fix · CNA SCALANCE X-200RNA switch family (Siemens) Fixed in V3.2.7
  • Fix · CNA SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (Siemens) Fixed in V4.1.3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-4848
  2. 2026-10-03 Alias added: GHSA-9g23-gj69-j9g7

References

Advisory 1

  • TI-2019-04623 The monitor barrier of the affected products insufficiently blocks data from being… CVSS 3.1CRITICAL 9.1
  • TI-2019-08162 Uncontrolled resource consumption in Siemens SCALANCE X-200 switch family CVSS 3.1HIGH 8.6
  • TI-2019-04621 Insufficiently protected credentials in Siemens SCALANCE X-200 switch family CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences