CVE-2019-6567

🗓️ 12 Jun 2019 13:47:56Reported by siemensType

A vulnerability in SCALANCE X-200, X-200IRT, X-300, and X-414-3E switches allows password extraction and recovery impacting confidentiality

Reporter	Title	Published	Views	Family All 12
CNVD	Siemens SCALANCE X Switches Local Information Disclosure Vulnerability	12 Jun 201900:00	–	cnvd
Cvelist	CVE-2019-6567	12 Jun 201913:47	–	cvelist
EUVD	EUVD-2019-16126	7 Oct 202500:30	–	euvd
ICS	Siemens SCALANCE X (Update B)	11 Jun 201900:00	–	ics
NCSC	Vulnerabilities fixed in Siemens Scalance products	9 Feb 202100:00	–	ncsc
NVD	CVE-2019-6567	12 Jun 201914:29	–	nvd
OSV	CVE-2019-6567	12 Jun 201914:29	–	osv
Pen Test Partners Blog	Pen Testing Ships. A year in review	4 Feb 202007:36	–	pentestpartners
Pen Test Partners Blog	Pwning a Siemens Scalance ICS switch through ARM reversing	3 Sep 201906:55	–	pentestpartners
Prion	Design/Logic Flaw	12 Jun 201914:29	–	prion

NVD

Node

siemens scalance_x-200_firmwareRange<5.2.4

AND

siemens scalance_x-200Match-

Node

siemens scalance_x-200irt_firmware

AND

siemens scalance_x-200irtMatch-

Node

siemens scalance_x-300_firmware

AND

siemens scalance_x-300Match-

Node

siemens scalance_x-414-3e_firmware

AND

siemens scalance_x-414-3eMatch-

[
  {
    "product": "SCALANCE X-200 switch family (incl. SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions < V5.2.4"
      }
    ]
  },
  {
    "product": "SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.5.0"
      }
    ]
  },
  {
    "product": "SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.3"
      }
    ]
  },
  {
    "product": "SCALANCE X-414-3E",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-646841.pdf

21 Nov 2024 04:46Current

5.2Medium risk

Vulners AI Score5.2

CVSS 22.1

CVSS 3.15.5

EPSS0.00051