2411 matches found
CVE-2019-10927
A vulnerability has been identified in SCALANCE SC-600 V2.0, SCALANCE XB-200 V4.1, SCALANCE XC-200 V4.1, SCALANCE XF-200BA V4.1, SCALANCE XP-200 V4.1, SCALANCE XR-300WG V4.1. An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service...
CVE-2019-10942
CVE-2019-10942 affects Siemens SCALANCE X switches (X-200, X-200IRT, X204RNA, X204RNA EEC/HSR/PRP) with all versions prior to specified fixed releases. Root cause: insufficient resource handling in the telnet service allows an attacker to repeatedly send large message packets, potentially trigger...
CVE-2019-10942
A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.5, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.5.0, SCALANCE X204RNA HSR All versions, SCALANCE X204RNA PRP All versions, SCALANCE X204RNA EEC HSR All...
CVE-2019-10928
A vulnerability has been identified in SCALANCE SC-600 V2.0. An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the device to allow execution of arbitrary commands. The security vulnerability could be exploited by an authenticated...
CVE-2019-10928
CVE-2019-10928 affects Siemens SCALANCE SC-600 (V2.0). The issue arises from improper adherence to coding standards (CWE-710) in the SC-600 firmware, allowing an authenticated attacker with network access via Port 22/TCP and, per updates, with physical access to the device, to trigger execution o...
CVE-2019-10927
CVE-2019-10927 affects Siemens SCALANCE family devices (SC-600 v2.0, XB-200 v4.1, XC-200 v4.1, XF-200BA v4.1, XP-200 v4.1, XR-300WG v4.1). An authenticated attacker with network access to port 22/tcp of an affected device can trigger a Denial-of-Service, impacting availability. No user interactio...
CVE-2019-10927
A vulnerability has been identified in SCALANCE SC-600 V2.0, SCALANCE XB-200 V4.1, SCALANCE XC-200 V4.1, SCALANCE XF-200BA V4.1, SCALANCE XP-200 V4.1, SCALANCE XR-300WG V4.1. An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service...
PT-2019-4667
Name of the Vulnerable Software and Affected Versions SCALANCE X-200 switch family versions prior to V5.2.5 SCALANCE X-200IRT switch family versions prior to V5.5.0 SCALANCE X204RNA HSR all versions SCALANCE X204RNA PRP all versions SCALANCE X204RNA EEC HSR all versions SCALANCE X204RNA EEC PRP a...
CVE-2019-10942: Uncontrolled Resource Consumption
A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.5, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.5.0, SCALANCE X204RNA HSR All versions, SCALANCE X204RNA PRP All versions, SCALANCE X204RNA EEC HSR All...
CVE-2019-10928: Improper Check or Handling of Exceptional Conditions
A vulnerability has been identified in SCALANCE SC-600 V2.0. An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the device to allow execution of arbitrary commands. The security vulnerability could be exploited by an authenticated...
CVE-2019-10927: Improper Check or Handling of Exceptional Conditions
A vulnerability has been identified in SCALANCE SC-600 V2.0, SCALANCE XB-200 V4.1, SCALANCE XC-200 V4.1, SCALANCE XF-200BA V4.1, SCALANCE XP-200 V4.1, SCALANCE XR-300WG V4.1. An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service...
PT-2019-4791
Name of the Vulnerable Software and Affected Versions SCALANCE SC-600 version V2.0 Description A vulnerability has been identified that allows an authenticated attacker with physical access to the device and access to port 22/tcp to execute arbitrary commands. The vulnerability can be exploited...
PT-2019-12088
Name of the Vulnerable Software and Affected Versions SCALANCE SC-600 version 2.0 SCALANCE XB-200 version 4.1 SCALANCE XC-200 version 4.1 SCALANCE XF-200BA version 4.1 SCALANCE XP-200 version 4.1 SCALANCE XR-300WG version 4.1 Description A vulnerability has been identified that could allow an...
ICSA-19-225-03_Siemens SCALANCE X Switches (Update D)
1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE X switches Vulnerability: Insufficient Resource Pool 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-19-225-03 Siemens SCALANCE...
Siemens SCALANCE Products (Update A)
1. EXECUTIVE SUMMARY CVSS v3 6.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SCALANCE Products Vulnerabilities: Improper Adherence to Coding Standards 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...
Siemens SCALANCE X-200 < v5.2.4, XP/XC/XF-200 < v4.1, X-300 all versions (ICSA-19-085-01)
Binary data 720273.prm...
The vulnerability of the SCALANCE X switch’s microprogramming software, related to incorrect data storage formatting, allows a intruder to restore passwords.
The vulnerability of the SCALANCE X microcontroller’s software is related to incorrect storage of user credentials. Exploiting this vulnerability could allow an intruder to retrieve passwords from the device access to the device’s configuration files is required...
Siemens SCALANCE W786-1 Unmanaged Ethernet Switch
Binary data 764607.prm...