CVE-2019-13933

🗓️ 16 Jan 2020 00:00:00Reported by siemensType
A vulnerability in multiple SCALANCE X series devices could allow unauthenticated attacker to violate access-control rules
Reporter	Title	Published	Views	Family All 10
CNVD	SIEMENS SCALANCE X witches series authentication bypass vulnerability	15 Jan 202000:00	–	cnvd
Cvelist	CVE-2019-13933	16 Jan 202000:00	–	cvelist
EUVD	EUVD-2019-5202	7 Oct 202500:30	–	euvd
ICS	Siemens SCALANCE X Switches (Update B)	14 Jan 202000:00	–	ics
NVD	CVE-2019-13933	16 Jan 202016:15	–	nvd
OSV	CVE-2019-13933	16 Jan 202016:15	–	osv
Prion	Design/Logic Flaw	16 Jan 202016:15	–	prion
Positive Technologies	PT-2020-2001 · Siemens · Siplus Net Scalance X308-2 +17	14 Jan 202000:00	–	ptsecurity
RedhatCVE	CVE-2019-13933	22 May 202510:07	–	redhatcve
Tenable Nessus	Siemens SCALANCE X Authentication Bypass (CVE-2019-13933)	25 Jan 202300:00	–	nessus
NVD
Node
siemens scalance_x-200rna_firmware
AND
siemens scalance_x-200rnaMatch-
Node
siemens scalance_x204rna_firmware
AND
siemens scalance_x204rnaMatch-
Node
siemens scalance_x-300_firmwareRange<4.1.3
AND
siemens scalance_x-300Match-
Node
siemens scalance_xr-300wg_firmwareRange<4.1.3
AND
siemens scalance_xr-300wgMatch-
Node
siemens scalance_xr-300_firmwareRange<4.1.3
AND
siemens scalance_xr-300Match-
Node
siemens scalance_x408-2_firmwareRange<4.1.3
AND
siemens scalance_x408-2Match-
Node
siemens siplus_net_csm_1277_firmwareRange<4.1.3
AND
siemens siplus_net_csm_1277Match-
[
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA (HSR)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA (PRP)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA EEC (HSR)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA EEC (PRP)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA EEC (PRP/HSR)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X302-7 EEC (230V)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X302-7 EEC (230V, coated)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X302-7 EEC (24V)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X302-7 EEC (24V, coated)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X302-7 EEC (2x 230V)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X302-7 EEC (2x 24V)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X304-2FE",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X306-1LD FE",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X307-2 EEC (230V)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X307-2 EEC (230V, coated)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X307-2 EEC (24V)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X307-2 EEC (24V, coated)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X307-2 EEC (2x 230V)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X307-2 EEC (2x 24V)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X307-3",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X307-3",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X307-3LD",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X307-3LD",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2LD",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2LD",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2LH",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2LH",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2LH+",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2LH+",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2M",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2M",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2M PoE",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2M PoE",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2M TS",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X308-2M TS",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X310",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X310",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X310FE",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X310FE",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X320-1 FE",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X320-1-2LD FE",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X408-2",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-12M (230V, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-12M (230V, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-12M (230V, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-12M (230V, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-12M (24V, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-12M (24V, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-12M (24V, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-12M (24V, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-12M TS (24V)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-12M TS (24V)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS NET SCALANCE X308-2",
    "versions": [
      {
        "version": "All versions < V4.1.3",
        "status": "affected"
      }
    ]
  }
]
Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-443566.pdf
us-cert	www.us-cert.gov/ics/advisories/icsa-20-014-03
21 Nov 2024 04:25Current
8.1High risk
Vulners AI Score8.1
CVSS 27.5
CVSS 3.18.6
EPSS0.00711
CWE-306