CVE-2014-8478: The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with...

Security readout for executives and security teams

This issue affects the web server on Siemens SCALANCE X-300 and SCALANCE X 408 switches running firmware before 4.0. A remote attacker could send malformed HTTP requests that cause the switch to reboot, creating a denial-of-service condition. The main business risk is loss of network availability in environments that rely on these switches. Exposure is most likely where affected SCALANCE switch web interfaces are reachable from untrusted networks, shared IT networks, or poorly segmented OT environments. Devices already on firmware 4.0 or later are not identified as affected by the provided description. Treat this as a targeted availability risk for industrial or network infrastructure environments. Prioritize remediation where affected switches support critical operations or have reachable web management interfaces. Urgency is lower where management access is tightly segmented and firmware is current. Mitigation focus: Identify SCALANCE X-300 and SCALANCE X 408 switches in the environment.; Check Siemens SSA-321046 and update affected firmware before 4.0 as vendor guidance directs.; Restrict web management access to trusted administration networks only..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.