Test ID:	1.3.6.1.4.1.25623.1.0.103907
Category:	Web application abuses
Title:	Siemens Scalance X-200 Series Switches Insufficient Entropy Vulnerability
Summary:	Siemens Scalance X-200 Series switches are prone to a; vulnerability in the entropy of random number generator.
Description:	Summary: Siemens Scalance X-200 Series switches are prone to a vulnerability in the entropy of random number generator. Vulnerability Insight: By requesting /fs/cfgFile.cfg it is possible to read the config of the remote device. Vulnerability Impact: Remote attackers can exploit this issue to hijack web sessions over the network without authentication. Other attacks are also possible. Affected Software/OS: Siemens Scalance X-200 Series switches running firmware versions prior to 5.0.0 are vulnerable. Solution: Updates are available. CVSS Score: 8.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-5709 http://ics-cert.us-cert.gov/advisories/ICSA-13-254-01
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.