Siemens AG SCALANCE SC-600
At a glance
- Source
- NVD
- EPSS
- EPSS 1.17 % · percentile 67 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- siemens
- NVD status
- Modified
Description
A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.
Weaknesses (CWE)
- CWE-703 — Improper Check or Handling of Exceptional Conditions
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 4.0 | AV:N/AC:L/Au:S/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2019-2641
- GCVE · GCVE-0-2019-10927
CERT-FR advisories
- CERTFR-2019-AVI-385 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:siemens:scalance_xb-200_firmware:4.1:*:*:*:*:*:*:*cpe:2.3:o:siemens:scalance_xc-200_firmware:4.1:*:*:*:*:*:*:*cpe:2.3:o:siemens:scalance_xf-200ba_firmware:4.1:*:*:*:*:*:*:*cpe:2.3:o:siemens:scalance_xp-200_firmware:4.1:*:*:*:*:*:*:*cpe:2.3:o:siemens:scalance_xr-300wg_firmware:4.1:*:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Siemens AG · SCALANCE SC-600 | affected V2.0 |
| Siemens AG · SCALANCE XB-200 | affected V4.1 |
| Siemens AG · SCALANCE XC-200 | affected V4.1 |
| Siemens AG · SCALANCE XF-200BA | affected V4.1 |
| Siemens AG · SCALANCE XP-200 | affected V4.1 |
| Siemens AG · SCALANCE XR-300WG | affected V4.1 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |