Siemens SCALANCE S-600 (Update B)
The firmware for SCALANCE S-600 family devices contains multiple web vulnerabilities. The vulnerabilities could allow an remote attacker to conduct Denial-of-Service attacks or perform Cross-Site Scripting attacks. Siemens has released updates for the affected products and recommends to update to the latest versions, or to upgrade to a successor product.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-6585US | medium6.1 | — | ||
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V… | ||||
| CVE-2019-13926US | high7.5 | — | ||
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V… | ||||
| CVE-2019-13925US | high7.5 | — | ||
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V… | ||||
references
External citations — patches, advisories, analysis.
- SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family - CSAF Versionself
- SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family - PDF Versionself
- SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family - TXT Versionself
- ICS Advisory ICSA-20-042-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-042-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (24)
- MitigationSCALANCE S602
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S602
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S602
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S612
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S612
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S612
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S623
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S623
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S623
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S627-2M
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S627-2M
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S627-2M
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- FixedSCALANCE S602
Update to V4.1
- FixedSCALANCE S602
Update to V4.1
- FixedSCALANCE S602
Update to V4.1
- FixedSCALANCE S612
Update to V4.1
- FixedSCALANCE S612
Update to V4.1
- FixedSCALANCE S612
Update to V4.1
- FixedSCALANCE S623
Update to V4.1
- FixedSCALANCE S623
Update to V4.1
- FixedSCALANCE S623
Update to V4.1
- FixedSCALANCE S627-2M
Update to V4.1
- FixedSCALANCE S627-2M
Update to V4.1
- FixedSCALANCE S627-2M
Update to V4.1
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan