SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family
The firmware for SCALANCE S-600 family devices contains multiple web vulnerabilities. The vulnerabilities could allow an remote attacker to conduct Denial-of-Service attacks or perform Cross-Site Scripting attacks. Siemens has released updates for the affected products and recommends to update to the latest versions, or to upgrade to a successor product.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-6585US | medium6.1 | — | ||
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V… | ||||
| CVE-2019-13926US | high7.5 | — | ||
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V… | ||||
| CVE-2019-13925US | high7.5 | — | ||
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (24)
- MitigationSCALANCE S602
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S602
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S602
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S612
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S612
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S612
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S623
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S623
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S623
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S627-2M
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S627-2M
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- MitigationSCALANCE S627-2M
Only access links from trusted sources in the browser you use to access the SCALANCE S-600 administration website.
- BehobenSCALANCE S602
Update to V4.1
- BehobenSCALANCE S602
Update to V4.1
- BehobenSCALANCE S602
Update to V4.1
- BehobenSCALANCE S612
Update to V4.1
- BehobenSCALANCE S612
Update to V4.1
- BehobenSCALANCE S612
Update to V4.1
- BehobenSCALANCE S623
Update to V4.1
- BehobenSCALANCE S623
Update to V4.1
- BehobenSCALANCE S623
Update to V4.1
- BehobenSCALANCE S627-2M
Update to V4.1
- BehobenSCALANCE S627-2M
Update to V4.1
- BehobenSCALANCE S627-2M
Update to V4.1
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan