CVE-2019-10927

A vulnerability has been identified in SCALANCE SC-600 V2.0, SCALANCE XB-200 V4.1, SCALANCE XC-200 V4.1, SCALANCE XF-200BA V4.1, SCALANCE XP-200 V4.1, SCALANCE XR-300WG V4.1. An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service...

CVE-2019-10928

A vulnerability has been identified in SCALANCE SC-600 V2.0. An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the device to allow execution of arbitrary commands. The security vulnerability could be exploited by an authenticated...

CVE-2019-10927

A vulnerability has been identified in SCALANCE SC-600 V2.0, SCALANCE XB-200 V4.1, SCALANCE XC-200 V4.1, SCALANCE XF-200BA V4.1, SCALANCE XP-200 V4.1, SCALANCE XR-300WG V4.1. An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service...

CVE-2019-10928

CVE-2019-10928 affects Siemens SCALANCE SC-600 (V2.0). The issue arises from improper adherence to coding standards (CWE-710) in the SC-600 firmware, allowing an authenticated attacker with network access via Port 22/TCP and, per updates, with physical access to the device, to trigger execution o...

CVE-2019-10928: Improper Check or Handling of Exceptional Conditions

A vulnerability has been identified in SCALANCE SC-600 V2.0. An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the device to allow execution of arbitrary commands. The security vulnerability could be exploited by an authenticated...

CVE-2019-10927: Improper Check or Handling of Exceptional Conditions

A vulnerability has been identified in SCALANCE SC-600 V2.0, SCALANCE XB-200 V4.1, SCALANCE XC-200 V4.1, SCALANCE XF-200BA V4.1, SCALANCE XP-200 V4.1, SCALANCE XR-300WG V4.1. An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service...

PT-2019-12088

Name of the Vulnerable Software and Affected Versions SCALANCE SC-600 version 2.0 SCALANCE XB-200 version 4.1 SCALANCE XC-200 version 4.1 SCALANCE XF-200BA version 4.1 SCALANCE XP-200 version 4.1 SCALANCE XR-300WG version 4.1 Description A vulnerability has been identified that could allow an...

PT-2019-4791

Name of the Vulnerable Software and Affected Versions SCALANCE SC-600 version V2.0 Description A vulnerability has been identified that allows an authenticated attacker with physical access to the device and access to port 22/tcp to execute arbitrary commands. The vulnerability can be exploited...

CVE-2018-13801

A vulnerability has been identified in ROX II All versions V2.12.1. An attacker with network access to port 22/tcp and valid low-privileged user credentials for the target device could perform a privilege escalation and gain root privileges. Successful exploitation requires user privileges of a...

Privilege escalation

A vulnerability has been identified in ROX II All versions V2.12.1. An attacker with network access to port 22/tcp and valid low-privileged user credentials for the target device could perform a privilege escalation and gain root privileges. Successful exploitation requires user privileges of a...

CVE-2018-13801

CVE-2018-13801 affects Siemens ROX II (all versions

CVE-2018-13801: Improper Privilege Management

A vulnerability has been identified in ROX II All versions V2.12.1. An attacker with network access to port 22/tcp and valid low-privileged user credentials for the target device could perform a privilege escalation and gain root privileges. Successful exploitation requires user privileges of a...

PT-2018-12197

Name of the Vulnerable Software and Affected Versions ROX II versions prior to V2.12.1 Description A vulnerability allows an authenticated attacker with high-privileged user account access via SSH to circumvent restrictions and execute arbitrary operating system commands. The attacker must have...

PT-2018-12196

Name of the Vulnerable Software and Affected Versions ROX II versions prior to V2.12.1 Description A vulnerability has been identified that allows an attacker with network access to port 22/tcp and valid low-privileged user credentials to perform a privilege escalation and gain root privileges...