SSA-591405

csafDEsiemens_psirt

SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family

view advisory published 2020-02-11

The firmware for SCALANCE S-600 family devices contains multiple web vulnerabilities. The vulnerabilities could allow an remote attacker to conduct Denial-of-Service attacks or perform Cross-Site Scripting attacks. Siemens has released updates for the affected products and recommends to update to the latest versions, or to upgrade to a successor product.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2019-6585USmedium6.1—
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V…
CVE-2019-13926UShigh7.5—
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V…
CVE-2019-13925UShigh7.5—
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V…
02

references

External citations — patches, advisories, analysis.

03

remediations (24)

  • MitigationSCALANCE S602

    Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.

  • MitigationSCALANCE S602

    Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.

  • MitigationSCALANCE S602

    Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.

  • MitigationSCALANCE S612

    Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.

  • MitigationSCALANCE S612

    Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.

  • MitigationSCALANCE S612

    Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.

  • MitigationSCALANCE S623

    Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.

  • MitigationSCALANCE S623

    Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.

  • MitigationSCALANCE S623

    Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.

  • MitigationSCALANCE S627-2M

    Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.

  • MitigationSCALANCE S627-2M

    Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.

  • MitigationSCALANCE S627-2M

    Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.

  • FixedSCALANCE S602

    Update to V4.1

  • FixedSCALANCE S602

    Update to V4.1

  • FixedSCALANCE S602

    Update to V4.1

  • FixedSCALANCE S612

    Update to V4.1

  • FixedSCALANCE S612

    Update to V4.1

  • FixedSCALANCE S612

    Update to V4.1

  • FixedSCALANCE S623

    Update to V4.1

  • FixedSCALANCE S623

    Update to V4.1

  • FixedSCALANCE S623

    Update to V4.1

  • FixedSCALANCE S627-2M

    Update to V4.1

  • FixedSCALANCE S627-2M

    Update to V4.1

  • FixedSCALANCE S627-2M

    Update to V4.1

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan