PT-2019-12088 · Siemens · Scalance Xr-300Wg+3

Published 2019-08-13 · Updated 2021-10-28 · CVE-2019-10927

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SCALANCE SC-600 version 2.0 SCALANCE XB-200 version 4.1 SCALANCE XC-200 version 4.1 SCALANCE XF-200BA version 4.1 SCALANCE XP-200 version 4.1 SCALANCE XR-300WG version 4.1

Description A vulnerability has been identified that could allow an authenticated attacker with network access to port 22/tcp to cause a Denial-of-Service condition. The vulnerability can be exploited without user interaction and impacts the availability of the affected device.

Recommendations For SCALANCE SC-600 version 2.0, update to a version that fixes this issue. For SCALANCE XB-200 version 4.1, update to a version that fixes this issue. For SCALANCE XC-200 version 4.1, update to a version that fixes this issue. For SCALANCE XF-200BA version 4.1, update to a version that fixes this issue. For SCALANCE XP-200 version 4.1, update to a version that fixes this issue. For SCALANCE XR-300WG version 4.1, update to a version that fixes this issue.

Fix

Weakness Enumeration

CWE-703

Related Identifiers

CVE-2019-10927

Affected Products

Scalance Sc-600

Scalance X-200

Scalance Xf-200Ba

Scalance Xr-300Wg

References · 5

• https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-10927 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10927 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2019-10927 · Vendor Advisory
• https://security.alpinelinux.org/vuln/CVE-2019-10927 · Note