Read the docs
TI-2018-10018 Aliases CVE-2018-13807GHSA-x4vv-2q68-xx2p

Improper input validation in Siemens SCALANCE X300, SCALANCE X408, SCALANCE X414

Priority MEDIUM 44CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SCALANCE X414 (All versions). The web interface on port 443/tcp could allow an attacker to cause a Denial-of-Service condition by sending specially crafted packets to the web server. The device will automatically reboot, impacting network availability for other devices. An attacker must have network access to port 443/tcp to exploit the vulnerability. Neither valid credentials nor interaction by a legitimate user is required to exploit the vulnerability. There is no confidentiality or integrity impact, only availability is temporarily impacted. This vulnerability could be triggered by publicly available tools.

Why it matters now

EPSS 0.0418 90th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSCALANCE X300, SCALANCE X408, SCALANCE X414SCALANCE X300 : All versions < V4.0.0; SCALANCE X408 : All versions < V4.0.0; SCALANCE X414 : All versions—No fix listedCNA
  • SCALANCE X300, SCALANCE X408, SCALANCE X414 VendorSiemens Affected SCALANCE X300 : All versions < V4.0.0; SCALANCE X408 : All versions < V4.0.0; SCALANCE X414 : All versions Fixed in — No fix listed CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:o:siemens:scalance_x408_firmware:*:*:*:*:*:*:*:*before 4.0.0VulnerableSiemens
cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:*before 4.0.0VulnerableSiemens
cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x414_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:scalance_x414:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:scalance_x408_firmware:*:*:*:*:*:*:*:* Versions before 4.0.0 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:* Versions before 4.0.0 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x414_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x414:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-13807
  2. 2026-10-03 Alias added: GHSA-x4vv-2q68-xx2p

References

Advisory 2

  • TI-2021-10614 An issue was discovered in Wind River VxWorks before 6.5. CVSS 3.1CRITICAL 9.8
  • TI-2018-03410 Heap-based buffer overflow in Siemens RFID 181EIP CVSS 3.0HIGH 8.8
  • TI-2017-01922 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 4.0HIGH 7.1
  • TI-2017-01923 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 4.0HIGH 7.1
  • TI-2018-03425 Cross-site scripting in Siemens SCALANCE X-200 switch family CVSS 3.0MEDIUM 6.1
  • TI-2018-03419 Cross-site scripting in Siemens SCALANCE X-200IRT switch family CVSS 3.0MEDIUM 4.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences