Vulnerability in Siemens Scalance X-200
CVE-2019-6569
The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H.
EPSS exploit prediction
EPSS: 0.013 (70.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 71st percentile — 70.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000
Affected products
- Siemens Scalance X-200
- Siemens Scalance X-200 Firmware
- Siemens Scalance X204-2 — versions All versions < V5.2.6
- Siemens Scalance X204-2fm — versions All versions < V5.2.6
- Siemens Scalance X204-2ld — versions All versions < V5.2.6
- Siemens Scalance X204-2ld Ts — versions All versions < V5.2.6
- Siemens Scalance X204-2ts — versions All versions < V5.2.6
- Siemens Scalance X206-1 — versions All versions < V5.2.6
- Siemens Scalance X206-1ld — versions All versions < V5.2.6
- Siemens Scalance X208 — versions All versions < V5.2.6
Weakness classification (CWE)
References
- cert-portal.siemens.com/productcert/pdf/ssa-557804.pdf (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-6569?
- CVE-2019-6569 is a critical-severity vulnerability in Siemens Scalance X-200, classified under Expected Behavior Violation. CVSS score: 9.1/10. Published 2019-03-26.
- How severe is CVE-2019-6569?
- Critical severity. CVSS v3 base score is 9.1 out of 10.