PT-2019-1886 · Siemens · Scalance

Publicado 2019-03-12 · Atualizado 2022-07-12 · CVE-2019-6569

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Scalance X (affected versions not specified)

Description The issue is related to insufficient monitoring barrier in the affected products, allowing data to be forwarded over the mirror port into the mirrored network. This behavior can be exploited by an attacker to transmit malicious packets to systems in the mirrored network, potentially influencing their configuration and runtime behavior. The vulnerability is also associated with inadequate input validation, which could enable a remote attacker to bypass firewall measures by sending malicious packets to the mirrored network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

CWE-440

Identificadores relacionados

BDU:2019-01539

CVE-2019-6569

Produtos afetados

Scalance

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-6569 · Nota de Segurança
• https://cert-portal.siemens.com/productcert/pdf/ssa-557804.pdf · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6569 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-01539 · Nota de Segurança