CVE-2019-6585

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. The integrated configuration web server of the affected devices could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User...

Cross site scripting

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. The integrated configuration web server of the affected devices could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User...

CVE-2019-6585

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. The integrated configuration web server of the affected devices could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User...

CVE-2019-6585

CVE-2019-6585 affects Siemens SCALANCE S600/S612/S623/S627-2M (versions 3.0–4.0; vulnerable until 4.0) with an XSS flaw in the integrated configuration web server. Exploitation requires user interaction and the attacker must lure a logged-in user to a crafted link, enabling cross-site scripting. ...

CVE-2019-6585: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. The integrated configuration web server of the affected devices could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User...

PT-2020-11213 · Siemens · Scalance S612 +3

Name of the Vulnerable Software and Affected Versions: SCALANCE S602 versions 3.0 through 4.0 SCALANCE S612 versions 3.0 through 4.0 SCALANCE S623 versions 3.0 through 4.0 SCALANCE S627-2M versions 3.0 through 4.0 Description: A security issue has been identified that could allow Cross-Site...

The vulnerability of the telnet service in Siemens industrial switches SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-200RNA allows a intruder to trigger a maintenance failure.

The vulnerability of the telnet service on Siemens SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-200RNA industrial switches is related to insufficient resource capacity. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Siemens SCALANCE S-600 Firewall WEB Server Denial of Service Vulnerability

The Siemens SCALANCE S-600 Firewall is an industrial firewall device. A security vulnerability exists on port 443 of the Siemens SCALANCE S-600 Firewall WEB server, which allows remote attackers to exploit the vulnerability by submitting a special request, which can be used for denial-of-service...

SIEMENS SCALAN CES-600 family Cross-Site Scripting Vulnerability

SCALANCE S firewall is used to protect trusted industrial networks from untrusted networks. A cross-site scripting vulnerability exists in the SIEMENS SCALAN CES-600 family. An attacker could exploit the vulnerability to trick an unsuspecting user into visiting a malicious link...

SIEMENS SCALAN CES-600 family denial of service vulnerability (CNVD-2020-04718)

SCALANCE S firewall is used to protect trusted industrial networks from untrusted networks. A denial of service vulnerability exists in the SIEMENS SCALAN CES-600 family. An attacker could exploit the vulnerability by sending packets on port 443/tcp of an affected device, resulting in a denial of...

Multiple Siemens Products Resource Management Error Vulnerability

Siemens SCALANCE X-200IRT and SCALANCE XB-200 are both products of Siemens, Germany.SCALANCE X-200IRT is an industrial grade Ethernet switch.SCALANCE XB-200 is a managed industrial Ethernet switch. A resource management error vulnerability exists in multiple Siemens products, where a program fail...

Multiple Siemens Products Input Validation Error Vulnerability (CNVD-2020-23037)

Siemens Scalance X-200 is an industrial Ethernet switch from Siemens, Germany. An input validation error vulnerability exists in multiple Siemens products, which can be exploited by attackers to hijack click-through actions by other users...

SIEMENS SCALAN CES-600 family Denial of Service Vulnerability

SCALANCE S firewall is used to protect trusted industrial networks from untrusted networks. A denial of service vulnerability exists in the SIEMENS SCALAN CES-600 family. An attacker could exploit the vulnerability by sending packets to port 443/tcp of the affected device, resulting in a denial o...

CVE-2019-13924

A vulnerability has been identified in SCALANCE S602 All versions V4.1, SCALANCE S612 All versions V4.1, SCALANCE S623 All versions V4.1, SCALANCE S627-2M All versions V4.1, SCALANCE X-200 switch family incl. SIPLUS NET variants All versions 5.2.4, SCALANCE X-200IRT switch family incl. SIPLUS NET...

CVE-2019-13926

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server. A cold reboot is required to restore the functionalit...

CVE-2019-13924

A vulnerability has been identified in SCALANCE S602 All versions V4.1, SCALANCE S612 All versions V4.1, SCALANCE S623 All versions V4.1, SCALANCE S627-2M All versions V4.1, SCALANCE X-200 switch family incl. SIPLUS NET variants All versions 5.2.4, SCALANCE X-200IRT switch family incl. SIPLUS NET...

CVE-2019-13925

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server...

CVE-2019-13926

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server. A cold reboot is required to restore the functionalit...

CVE-2019-13925

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server...

Design/Logic Flaw

A vulnerability has been identified in SCALANCE S602 All versions V4.1, SCALANCE S612 All versions V4.1, SCALANCE S623 All versions V4.1, SCALANCE S627-2M All versions V4.1, SCALANCE X-200 switch family incl. SIPLUS NET variants All versions 5.2.4, SCALANCE X-200IRT switch family incl. SIPLUS NET...