ICSA-19-227-03

icsaUScisa_csaf_ot

Siemens SCALANCE Products (Update A)

view advisory published 2019-08-13

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2019-10928USmedium6.6—
A vulnerability has been identified in SCALANCE SC-600 (V2.0). An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the…
CVE-2019-10927USmedium6.5—
A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (…
02

references

External citations — patches, advisories, analysis.

03

remediations (23)

  • MitigationSCALANCE SC-600

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XB-200

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XB-200

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XC-200

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XC-200

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XF-200BA

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XF-200BA

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XP-200

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XP-200

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XR-300WG

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XR-300WG

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • FixedSCALANCE SC-600

    Update to V2.0.1 https://support.industry.siemens.com/cs/ww/en/view/109769665

  • FixedSCALANCE SC-600

    Update to V2.0.1 https://support.industry.siemens.com/cs/ww/en/view/109769665

  • FixedSCALANCE XB-200

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • FixedSCALANCE XB-200

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • FixedSCALANCE XC-200

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • FixedSCALANCE XC-200

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • FixedSCALANCE XF-200BA

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • FixedSCALANCE XF-200BA

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • FixedSCALANCE XP-200

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • FixedSCALANCE XP-200

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • FixedSCALANCE XR-300WG

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • FixedSCALANCE XR-300WG

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan