SSA-100232

csafDEsiemens_psirt

SSA-100232: Denial-of-Service vulnerability in SCALANCE X Switches

view advisory published 2019-08-13

A vulnerability in several SCALANCE X devices could allow an unauthenticated attacker with network access to an affected device to perform a denial-of-service. Siemens has released an update for SCALANCE X-200IRT and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-10942UShigh8.6—
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)…
02

references

External citations — patches, advisories, analysis.

03

remediations (14)

  • MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)

    Disable telnet service on affected devices and use SSH instead

  • MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)

    Disable telnet service on affected devices and use SSH instead

  • MitigationSCALANCE X204RNA (HSR)

    Disable telnet service on affected devices and use SSH instead

  • MitigationSCALANCE X204RNA (PRP)

    Disable telnet service on affected devices and use SSH instead

  • MitigationSCALANCE X204RNA EEC (HSR)

    Disable telnet service on affected devices and use SSH instead

  • MitigationSCALANCE X204RNA EEC (PRP)

    Disable telnet service on affected devices and use SSH instead

  • MitigationSCALANCE X204RNA EEC (PRP/HSR)

    Disable telnet service on affected devices and use SSH instead

  • No fix plannedSCALANCE X204RNA (HSR)

    Currently no remediation is planned

  • No fix plannedSCALANCE X204RNA (PRP)

    Currently no remediation is planned

  • No fix plannedSCALANCE X204RNA EEC (HSR)

    Currently no remediation is planned

  • No fix plannedSCALANCE X204RNA EEC (PRP)

    Currently no remediation is planned

  • No fix plannedSCALANCE X204RNA EEC (PRP/HSR)

    Currently no remediation is planned

  • FixedSCALANCE X-200 switch family (incl. SIPLUS NET variants)

    Update to V5.2.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109801131/
  • FixedSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)

    Update to V5.5.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109792534/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan