CVE-2019-10928

mediumPriorität · verfolgen · 26EPSS 0.004 · 35. PerzentilEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.41% (35th) EPSS
CVSS 4.6 · medium
Is it mine?
15 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in SCALANCE SC-600 (V2.0). An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the device to allow execution of arbitrary commands. The security vulnerability could be exploited by an authenticated attacker with physical access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the confidentiality, integrity and availability of the affected device.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenSCALANCE SC-600cisa_csaf_ot

    Update to V2.0.1 https://support.industry.siemens.com/cs/ww/en/view/109769665

  • BehobenSCALANCE XB-200cisa_csaf_ot

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • BehobenSCALANCE XC-200cisa_csaf_ot

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • BehobenSCALANCE XF-200BAcisa_csaf_ot

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • BehobenSCALANCE XP-200cisa_csaf_ot

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • BehobenSCALANCE XR-300WGcisa_csaf_ot

    Update to V4.2 https://support.industry.siemens.com/cs/ww/en/view/109779919/

  • MitigationSCALANCE SC-600cisa_csaf_ot

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XB-200cisa_csaf_ot

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XC-200cisa_csaf_ot

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XF-200BAcisa_csaf_ot

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XP-200cisa_csaf_ot

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

  • MitigationSCALANCE XR-300WGcisa_csaf_ot

    Protect access to port 22/tcp (using the build-in firewall for SCALANCE SC-600)

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.6
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.04.6mediumAV:L/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 6.4
v3.16.6mediumCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 0.7 · Auswirkung 5.9
v3.16.6mediumCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.16.6mediumAV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.16.1mediumCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-703USCWE-703USCWE-703US
04

betroffene Produkte (15)

Betroffene Produkte und Versionsbereiche.

05

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-19-227-03Siemens SCALANCE Products (Update A)2019-08-13icsa · cisa_csaf_otUS

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

06

auch bekannt als (6)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otnvdNVDCVE.orgMITRE
veröffentlicht 2019-08-13geändert 2026-06-17
08

Referenzen (7)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan