Siemens SCALANCE X accessory SCP992-1

Binary data 765082.prm...

Siemens SCALANCE X Plug-in accessory SFP992-1LD

Binary data 765100.prm...

Siemens SCALANCE X Plug-in accessory SFP991-1

Binary data 765092.prm...

Siemens SCALANCE X Plug-in accessory SFP992-1BXMR

Binary data 765098.prm...

Siemens SCALANCE X Plug-in accessory SFP992-1ELH

Binary data 765104.prm...

Siemens SCALANCE SC-600 Command Injection Vulnerability

The Siemens SCALANCE SC-600 is an industrial security device from Siemens, Germany. It is designed to protect devices and networks in the discrete manufacturing and process industries and protects industrial communications through mechanisms such as stateful packet inspection firewalls SPI...

ICSA-19-253-03_Siemens Industrial Products (Update P)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Industrial Products Vulnerabilities: Excessive Data Query Operations in a Large Data Table, Integer Overflow or Wraparound, Uncontrolled Resource Consumption 2. UPDATE INFORMATION...

Pwning a Siemens Scalance ICS switch through ARM reversing

We’ve been working in industrial control systems security for a long time. Several of the team here used to work in OT control rooms or support SCADA environments. Whilst pen testing a ship control system, we noticed a heavy reliance on Siemens Scalance industrial ethernet switches, so bought a...

Siemens SCALANCE SC-600 Command Execution Vulnerability

SCALANCE SC firewall is used to protect trusted industrial networks from untrusted networks. It allows the filtering of incoming and outgoing network connections in different ways. A command execution vulnerability exists in the Siemens SCALANCE SC-600. An attacker could exploit this vulnerabilit...

Siemens SCALANCE X-Series Uncontrolled Resource Consumption Vulnerability

SCALANCE X is a family of industrial Ethernet switches from Siemens. An uncontrolled resource consumption vulnerability exists in the Siemens SCALANCE X series. An attacker can exploit this vulnerability by repeatedly sending large message packets to the telnet service to cause a denial of servic...

Denial of Service Vulnerability in Multiple Siemens Products (CNVD-2019-27702)

SCALANCE SC firewall is used to protect trusted industrial networks from untrusted networks. It allows input and output network connections to be filtered in different ways.SCALANCE X switches a are used to connect industrial components such as programmable logic controllers PLCs or human machine...

CVE-2019-10942

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.5, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.5.0, SCALANCE X204RNA HSR All versions, SCALANCE X204RNA PRP All versions, SCALANCE X204RNA EEC HSR All...

CVE-2019-10927

A vulnerability has been identified in SCALANCE SC-600 V2.0, SCALANCE XB-200 V4.1, SCALANCE XC-200 V4.1, SCALANCE XF-200BA V4.1, SCALANCE XP-200 V4.1, SCALANCE XR-300WG V4.1. An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service...

CVE-2019-10928

A vulnerability has been identified in SCALANCE SC-600 V2.0. An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the device to allow execution of arbitrary commands. The security vulnerability could be exploited by an authenticated...

CVE-2019-10927

A vulnerability has been identified in SCALANCE SC-600 V2.0, SCALANCE XB-200 V4.1, SCALANCE XC-200 V4.1, SCALANCE XF-200BA V4.1, SCALANCE XP-200 V4.1, SCALANCE XR-300WG V4.1. An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service...

CVE-2019-10928

A vulnerability has been identified in SCALANCE SC-600 V2.0. An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the device to allow execution of arbitrary commands. The security vulnerability could be exploited by an authenticated...

ALPINE-CVE-2019-10927

A vulnerability has been identified in SCALANCE SC-600 V2.0, SCALANCE XB-200 V4.1, SCALANCE XC-200 V4.1, SCALANCE XF-200BA V4.1, SCALANCE XP-200 V4.1, SCALANCE XR-300WG V4.1. An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service...

Race condition

A vulnerability has been identified in SCALANCE SC-600 V2.0, SCALANCE XB-200 V4.1, SCALANCE XC-200 V4.1, SCALANCE XF-200BA V4.1, SCALANCE XP-200 V4.1, SCALANCE XR-300WG V4.1. An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service...

Design/Logic Flaw

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.5, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.5.0, SCALANCE X204RNA HSR All versions, SCALANCE X204RNA PRP All versions, SCALANCE X204RNA EEC HSR All...

Design/Logic Flaw

A vulnerability has been identified in SCALANCE SC-600 V2.0. An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the device to allow execution of arbitrary commands. The security vulnerability could be exploited by an authenticated...