Vulnerabilities > Siemens > Scalance W746 1Pro

DATE CVE VULNERABILITY TITLE RISK
2013-08-01 CVE-2013-4652 Authentication Bypass vulnerability in Siemens Scalance W-700 Series
Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a (1) SSH or (2) TELNET connection.
network
low complexity
siemens
critical
10.0
2013-08-01 CVE-2013-4651 Credentials Management vulnerability in Siemens products
Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.
network
high complexity
siemens CWE-255
6.6