Design/Logic Flaw

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server. A cold reboot is required to restore the functionalit...

Design/Logic Flaw

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server...

CVE-2019-13925

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server...

CVE-2019-13925

CVE-2019-13925 affects Siemens SCALANCE S-600 family (S602, S612, S623, S627-2M) v3.0–v4.0.x, where specially crafted packets to port 443/tcp can cause an unbounded/ uncontrolled resource consumption and DoS on the web server. Root cause is an Uncontrolled Resource Consumption issue in the integr...

CVE-2019-13926

CVE-2019-13926 affects Siemens SCALANCE S-600 family (S602, S612, S623, S627-2M) with versions >= V3.0 and

Siemens Industrial Products SNMP (Update F)

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SCALANCE X Switches (Update B)

1. EXECUTIVE SUMMARY CVSS v3 4.2 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SCALANCE X switches Vulnerability: Protection Mechanism Failure 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-20-042-07 Siemens...

Siemens PROFINET-IO Stack (Update H)

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SCALANCE S-600 (Update B)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE S-600 Firewall Vulnerabilities: Resource Exhaustion, Cross-site Scripting 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled...

CVE-2019-13924

A vulnerability has been identified in SCALANCE S602 All versions V4.1, SCALANCE S612 All versions V4.1, SCALANCE S623 All versions V4.1, SCALANCE S627-2M All versions V4.1, SCALANCE X-200 switch family incl. SIPLUS NET variants All versions 5.2.4, SCALANCE X-200IRT switch family incl. SIPLUS NET...

PT-2020-2434 · Siemens · Scalance S612 +3

Name of the Vulnerable Software and Affected Versions: SCALANCE S602 versions 3.0 through 4.0 SCALANCE S612 versions 3.0 through 4.0 SCALANCE S623 versions 3.0 through 4.0 SCALANCE S627-2M versions 3.0 through 4.0 Description: A vulnerability has been identified that could cause a Denial-of-Servi...

CVE-2019-13924: Protection Mechanism Failure

A vulnerability has been identified in SCALANCE S602 All versions V4.1, SCALANCE S612 All versions V4.1, SCALANCE S623 All versions V4.1, SCALANCE S627-2M All versions V4.1, SCALANCE X-200 switch family incl. SIPLUS NET variants All versions 5.2.4, SCALANCE X-200IRT switch family incl. SIPLUS NET...

PT-2020-9414 · Siemens · Scalance X-200Irt Switch Family +5

Name of the Vulnerable Software and Affected Versions: SCALANCE S602 versions prior to V4.1 SCALANCE S612 versions prior to V4.1 SCALANCE S623 versions prior to V4.1 SCALANCE S627-2M versions prior to V4.1 SCALANCE X-200 switch family versions prior to 5.2.4 SCALANCE X-200IRT switch family versio...

PT-2020-2435

Name of the Vulnerable Software and Affected Versions SCALANCE S602 versions 3.0 through 4.1 SCALANCE S612 versions 3.0 through 4.1 SCALANCE S623 versions 3.0 through 4.1 SCALANCE S627-2M versions 3.0 through 4.1 Description A Denial-of-Service condition can be caused by specially crafted packets...

CVE-2019-13925: Uncontrolled Resource Consumption

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server...

CVE-2019-13926: Uncontrolled Resource Consumption

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server. A cold reboot is required to restore the functionalit...

CVE-2019-13924

CVE-2019-13924 affects Siemens SCALANCE X and S switches. The root issue is that the admin web interface does not send the X-Frame-Options header, enabling clickjacking where an attacker could trick a logged-in administrator into performing actions via a malicious page. Affected families and vers...

The vulnerability of Siemens industrial switches Siemens SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-300 allows attackers to execute cross-site scripting attacks (XSS).

The vulnerability of Siemens industrial switches SCalance X-200, SCALANCE X-200IRT, and SCALANCE X-300 relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of Siemens industrial switches SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-300’s web servers allows attackers to execute cross-site scripting attacks.

The vulnerability of Siemens industrial switches SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-300 relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

CVE-2019-13933

A vulnerability has been identified in SCALANCE X204RNA HSR, SCALANCE X204RNA PRP, SCALANCE X204RNA EEC HSR, SCALANCE X204RNA EEC PRP, SCALANCE X204RNA EEC PRP/HSR, SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-...