Cross-site scripting in Siemens SCALANCE S602, SCALANCE S612, SCALANCE S623, SCALANCE…
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-80.
Summary
A vulnerability has been identified in SCALANCE S602 (All versions < V4.0.1.1), SCALANCE S612 (All versions < V4.0.1.1), SCALANCE S623 (All versions < V4.0.1.1), SCALANCE S627-2M (All versions < V4.0.1.1). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SCALANCE S602, SCALANCE S612, SCALANCE S623, SCALANCE S627-2M | SCALANCE S602 : All versions < V4.0.1.1; SCALANCE S612 : All versions < V4.0.1.1; SCALANCE S623 : All versions < V4.0.1.1; SCALANCE S627-2M : All versions < V4.0.1.1 | — | No fix listed | CNA |
- SCALANCE S602, SCALANCE S612, SCALANCE S623, SCALANCE S627-2M VendorSiemens Affected SCALANCE S602 : All versions < V4.0.1.1; SCALANCE S612 : All versions < V4.0.1.1; SCALANCE S623 : All versions < V4.0.1.1; SCALANCE S627-2M : All versions < V4.0.1.1 Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_s602_firmware:*:*:*:*:*:*:*:* | before v4.0.1.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_s602:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_s612_firmware:*:*:*:*:*:*:*:* | before 4.0.1.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_s612:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_s623_firmware:*:*:*:*:*:*:*:* | before 4.0.1.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_s623:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_s627-2m_firmware:*:*:*:*:*:*:*:* | before 4.0.1.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_s627-2m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_s602_firmware:*:*:*:*:*:*:*:* Versions before v4.0.1.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_s602:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_s612_firmware:*:*:*:*:*:*:*:* Versions before 4.0.1.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_s612:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_s623_firmware:*:*:*:*:*:*:*:* Versions before 4.0.1.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_s623:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_s627-2m_firmware:*:*:*:*:*:*:*:* Versions before 4.0.1.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_s627-2m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-16555
- 2026-10-03 Alias added: GHSA-8j36-9mff-4j84
References
More Siemens Scalance S602 Firmware vulnerabilities
- TI-2021-02413 NULL pointer deref in signature_algorithms processing CVSS 3.1MEDIUM 5.9
- TI-2019-10382 Uncontrolled resource consumption in Siemens SCALANCE S602 CVSS 3.1HIGH 7.5
- TI-2019-10381 Uncontrolled resource consumption in Siemens SCALANCE S602 CVSS 3.1HIGH 7.5
- TI-2019-04637 Cross-site scripting in Siemens SCALANCE S602 CVSS 3.1MEDIUM 6.1
Sources
- CVE-2018-16555 · CVE Program
- CVE-2018-16555 · NVD
- FIRST EPSS
- GHSA-8j36-9mff-4j84 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences