CVEvulnerability
CVE-2019-6569
9.1 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-03-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P
- Weaknesses
- CWE-440
Description
The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.
Affected configurations
• siemens scalance x-200 firmware (< 5.2.4)
• siemens scalance x-300 firmware (< 4.1.3)
• siemens scalance xp-200 firmware (< 4.1)
• siemens scalance xc-200 firmware (< 4.1)
• siemens scalance xf-200 firmware (< 4.1)
Related
Weakness · CWE (1)
- CWE-440 Expected Behavior Violation weakness
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-557804.pdf Patch, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-557804.pdf Patch, Vendor Advisory