Rewterz Threat Advisory – Siemens SCALANCE W1750D Multiple Command Injection and Cross-Site Scripting Vulnerabilities

Severity

High

Analysis Summary

CVE-2018-7084

An unauthenticated user with access to the web interface can execute arbitrary system commands within the underlying operating system, which may allow the attacker to copy files, read configuration, write files, delete files, or reboot the device.

CVE-2018-7083

An unauthenticated attacker can access core dumps of previously crashed processes through the web interface of the device, which may allow disclosure of sensitive information.

CVE-2018-16417

An unauthenticated user may retrieve recently cached configuration commands by sending a crafted URL to the web interface of an affected device, which may allow disclosure of sensitive information.

CVE-2018-7082

An authenticated administrative user can execute arbitrary commands on the underlying operating system.

CVE-2018-7064

If an attacker can trick an administrator into clicking a link, they could then take administrative actions on the device or expose a session cookie for an administrative session.

Impact

• Command Injection
• Information Exposure
• Cross-site Scripting

Affected Vendors

Siemens

Affected Products

SCALANCE W1750D

Remediation

Vendor recommends users upgrade to Version 8.4.0.1 or later, which can be downloaded from the following link:

https://support.industry.siemens.com/cs/us/en/view/109766816/