CVE-2014-8478

HIGH 7.8CVE-2014-8478 · Published 21/01/2015 · updated 17/06/2026

In short

CVE-2014-8478 is a HIGH (CVSS 7.8) vulnerability affecting scalance x-300 series firmware (siemens), scalance x-408 firmware (siemens).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
scalance x-300 series firmware siemens	`≤ 3.9.3`	No fix yet
scalance x-408 firmware siemens	`≤ 3.9.3`	No fix yet

Description

The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service (reboot) via malformed HTTP requests.

References

siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-321046.pdf · Vendor Advisory
cert-portal.siemens.com/productcert/pdf/ssa-321046.pdf

More vulnerabilities in scalance x-300 series firmware

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free