SSA-100232

csafDEsiemens_psirt

SSA-100232: Denial-of-Service vulnerability in SCALANCE X Switches

Advisory ansehen veröffentlicht 2019-08-13

A vulnerability in several SCALANCE X devices could allow an unauthenticated attacker with network access to an affected device to perform a denial-of-service. Siemens has released an update for SCALANCE X-200IRT and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-10942UShigh8.6—
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (14)

  • MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)

    Disable telnet service on affected devices and use SSH instead

  • MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)

    Disable telnet service on affected devices and use SSH instead

  • MitigationSCALANCE X204RNA (HSR)

    Disable telnet service on affected devices and use SSH instead

  • MitigationSCALANCE X204RNA (PRP)

    Disable telnet service on affected devices and use SSH instead

  • MitigationSCALANCE X204RNA EEC (HSR)

    Disable telnet service on affected devices and use SSH instead

  • MitigationSCALANCE X204RNA EEC (PRP)

    Disable telnet service on affected devices and use SSH instead

  • MitigationSCALANCE X204RNA EEC (PRP/HSR)

    Disable telnet service on affected devices and use SSH instead

  • Kein Fix geplantSCALANCE X204RNA (HSR)

    Currently no remediation is planned

  • Kein Fix geplantSCALANCE X204RNA (PRP)

    Currently no remediation is planned

  • Kein Fix geplantSCALANCE X204RNA EEC (HSR)

    Currently no remediation is planned

  • Kein Fix geplantSCALANCE X204RNA EEC (PRP)

    Currently no remediation is planned

  • Kein Fix geplantSCALANCE X204RNA EEC (PRP/HSR)

    Currently no remediation is planned

  • BehobenSCALANCE X-200 switch family (incl. SIPLUS NET variants)

    Update to V5.2.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109801131/
  • BehobenSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)

    Update to V5.5.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109792534/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan