Vulnerability in Siemens Scalance X-200
CVE-2019-6569
The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.
EPSS: 0.013 (69.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H.
Affected products
- Siemens Scalance_x-200
- Siemens Scalance_x-200_firmware
- Siemens Scalance X204-2 — versions All versions < V5.2.6
- Siemens Scalance X204-2fm — versions All versions < V5.2.6
- Siemens Scalance X204-2ld — versions All versions < V5.2.6
- Siemens Scalance X204-2ld Ts — versions All versions < V5.2.6
- Siemens Scalance X204-2ts — versions All versions < V5.2.6
- Siemens Scalance X206-1 — versions All versions < V5.2.6
- Siemens Scalance X206-1ld — versions All versions < V5.2.6
- Siemens Scalance X208 — versions All versions < V5.2.6
Weakness classification (CWE)
References
- productcert@siemens.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-6569?
- CVE-2019-6569 is a critical-severity vulnerability in Siemens Scalance X-200, classified under Expected Behavior Violation. CVSS score: 9.1/10. Published 2019-03-26.
- How severe is CVE-2019-6569?
- Critical severity. CVSS v3 base score is 9.1 out of 10.