CVE-2019-13924

🗓️ 11 Feb 2020 00:00:00Reported by siemensType

Vulnerability in SCALANCE S602, S612, S623, S627-2M, X-200 switch, X-200IRT, X-200RNA, X-300. Clickjacking vulnerability allows unauthorized administrative actions

Reporter	Title	Published	Views	Family All 12
CNVD	Multiple Siemens Products Input Validation Error Vulnerability (CNVD-2020-23037)	12 Feb 202000:00	–	cnvd
Cvelist	CVE-2019-13924	11 Feb 202000:00	–	cvelist
EUVD	EUVD-2019-5194	7 Oct 202500:30	–	euvd
ICS	Siemens SCALANCE X Switches (Update B)	11 Feb 202000:00	–	ics
NCSC	Vulnerabilities fixed in Siemens Scalance products	9 Feb 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in Siemens products	13 Apr 202100:00	–	ncsc
NVD	CVE-2019-13924	11 Feb 202016:15	–	nvd
OSV	CVE-2019-13924	11 Feb 202016:15	–	osv
Prion	Design/Logic Flaw	11 Feb 202016:15	–	prion
Positive Technologies	PT-2020-9414 · Siemens · Scalance X-200Irt Switch Family +5	11 Feb 202000:00	–	ptsecurity

NVD

Node

siemens scalance_xc-200_firmwareRange<5.2.4

AND

siemens scalance_xc-200Match-

Node

siemens scalance_xf-200_firmwareRange<5.2.4

AND

siemens scalance_xf-200Match-

Node

siemens scalance_xp-200_firmwareRange<5.2.4

AND

siemens scalance_xp-200Match-

Node

siemens scalance_x-200irt_firmware

AND

siemens scalance_x-200irtMatch-

Node

siemens scalance_xb-200_firmwareRange<5.2.4

AND

siemens scalance_xb-200Match-

Node

siemens scalance_xr-300wg_firmwareRange<4.1.3

AND

siemens scalance_xr-300wgMatch-

Node

siemens scalance_x-300_firmwareRange<4.1.3

AND

siemens scalance_x-300Match-

Node

siemens scalance_xr-300_firmwareRange<4.1.3

AND

siemens scalance_xr-300Match-

[
  {
    "vendor": "Siemens",
    "product": "SCALANCE S602",
    "versions": [
      {
        "version": "All versions < V4.1",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE S612",
    "versions": [
      {
        "version": "All versions < V4.1",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE S623",
    "versions": [
      {
        "version": "All versions < V4.1",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE S627-2M",
    "versions": [
      {
        "version": "All versions < V4.1",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X-200 switch family (incl. SIPLUS NET variants)",
    "versions": [
      {
        "version": "All versions < 5.2.4",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)",
    "versions": [
      {
        "version": "All versions < V5.5.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X-200RNA switch family",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)",
    "versions": [
      {
        "version": "All versions < 4.1.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.gov/ics/advisories/icsa-20-042-07
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-951513.pdf

21 Nov 2024 04:25Current

5.2Medium risk

Vulners AI Score5.2

CVSS 24.3

CVSS 3.15.4

EPSS0.00271