CVE-2019-10927
mediumPriorität · verfolgen · 26EPSS 0.012 · 67. PerzentilEUUSEPSS · bewertet 2026-10-27
A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSCALANCE SC-600cisa_csaf_ot
Update to V2.0.1 https://support.industry.siemens.com/cs/ww/en/view/109769665
- BehobenSCALANCE XB-200cisa_csaf_ot
Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/
- BehobenSCALANCE XC-200cisa_csaf_ot
Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/
- BehobenSCALANCE XF-200BAcisa_csaf_ot
Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/
- BehobenSCALANCE XP-200cisa_csaf_ot
Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/
- BehobenSCALANCE XR-300WGcisa_csaf_ot
Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/
- MitigationSCALANCE XB-200cisa_csaf_ot
Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)
- MitigationSCALANCE XC-200cisa_csaf_ot
Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)
- MitigationSCALANCE XF-200BAcisa_csaf_ot
Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)
- MitigationSCALANCE XP-200cisa_csaf_ot
Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)
- MitigationSCALANCE XR-300WGcisa_csaf_ot
Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (21)
Betroffene Produkte und Versionsbereiche.
- siemens scalance xb-200 firmware= 4.1nvdUScpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:*
- siemens scalance xc-200 firmware= 4.1nvdUScpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:*
- siemens scalance xf-200ba firmware= 4.1nvdUScpe:2.3:o:siemens:scalance_xf-200ba_firmware:*:*:*:*:*:*:*:*
- siemens scalance xp-200 firmware= 4.1nvdUScpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-19-227-03Siemens SCALANCE Products (Update A)2019-08-13icsa · cisa_csaf_otUS
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (7)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdfcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2019-10927cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-19-227-03cnnvd
- https://www.auscert.org.au/bulletins/ESB-2019.3149/cnnvd
- https://www.us-cert.gov/ics/advisories/icsa-19-227-03cnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdfenisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdfPatchVendor Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan