CVEvulnerability
CVE-2019-10927
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-08-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-703
Description
A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.
Affected configurations
• siemens scalance xb-200 firmware 4.1
• siemens scalance xc-200 firmware 4.1
• siemens scalance xf-200ba firmware 4.1
• siemens scalance xp-200 firmware 4.1
• siemens scalance xr-300wg firmware 4.1
Related
Weakness · CWE (1)
- CWE-703 Improper Check or Handling of Exceptional Conditions weakness
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdf Patch, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdf Patch, Vendor Advisory