CVE-2019-10942
mediumPriorität · verfolgen · 34EPSS 0.014 · 72. PerzentilDEEURUUSEPSS · bewertet 2026-10-27
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X204RNA (HSR) (All versions), SCALANCE X204RNA (PRP) (All versions), SCALANCE X204RNA EEC (HSR) (All versions), SCALANCE X204RNA EEC (PRP) (All versions), SCALANCE X204RNA EEC (PRP/HSR) (All versions). The device contains a vulnerability that could allow an attacker to trigger a denial-of-service condition by sending large message packages repeatedly to the telnet service. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSCALANCE X-200 switch family (incl. SIPLUS NET variants)siemens_psirt
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)siemens_psirt
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)siemens_psirt
Disable telnet service on affected devices and use SSH instead
- MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)siemens_psirt
Disable telnet service on affected devices and use SSH instead
- MitigationSCALANCE X204RNA (HSR)siemens_psirt
Disable telnet service on affected devices and use SSH instead
- MitigationSCALANCE X204RNA (PRP)siemens_psirt
Disable telnet service on affected devices and use SSH instead
- MitigationSCALANCE X204RNA EEC (HSR)siemens_psirt
Disable telnet service on affected devices and use SSH instead
- MitigationSCALANCE X204RNA EEC (PRP)siemens_psirt
Disable telnet service on affected devices and use SSH instead
- MitigationSCALANCE X204RNA EEC (PRP/HSR)siemens_psirt
Disable telnet service on affected devices and use SSH instead
- MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)cisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf - MitigationSCALANCE X-200RNAcisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf - MitigationSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)cisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf - MitigationSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)cisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf - MitigationSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)cisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf - MitigationSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)cisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf - MitigationSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)cisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf - Kein Fix geplantSCALANCE X204RNA (HSR)siemens_psirt
Currently no remediation is planned
- Kein Fix geplantSCALANCE X204RNA (PRP)siemens_psirt
Currently no remediation is planned
- Kein Fix geplantSCALANCE X204RNA EEC (HSR)siemens_psirt
Currently no remediation is planned
- Kein Fix geplantSCALANCE X204RNA EEC (PRP)siemens_psirt
Currently no remediation is planned
- Kein Fix geplantSCALANCE X204RNA EEC (PRP/HSR)siemens_psirt
Currently no remediation is planned
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–8.6
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (27)
Betroffene Produkte und Versionsbereiche.
- Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)All versions → V5.5.0enisa_euvdEU
- siemens scalance x-200 firmwarealle VersionennvdUScpe:2.3:o:siemens:scalance_x-200_firmware:*:*:*:*:*:*:*:*
- siemens scalance x-200irt firmwarealle VersionennvdUScpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:*
- siemens scalance x-200rna firmwarealle VersionennvdUScpe:2.3:o:siemens:scalance_x-200rna_firmware:*:*:*:*:*:*:*:*
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-100232SSA-100232: Denial-of-Service vulnerability in SCALANCE X Switches2019-08-13csaf · siemens_psirtDE
A vulnerability in several SCALANCE X devices could allow an unauthenticated attacker with network access to an affected device to perform a denial-of-service. Siemens has released an update for SCALANCE X-200IRT and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
- ICSA-19-225-03ICSA-19-225-03_Siemens SCALANCE X Switches (Update D)2019-08-13icsa · cisa_csaf_otUS
Younes Dragoni and Alessandro Di Pinto from Nozomi Networks and Artem Zinenko from Kaspersky reported these vulnerability details to Siemens.
auch bekannt als (5)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (7)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert-portal.siemens.com/productcert/pdf/ssa-100232.pdfcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2019-10942cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-19-225-03cnnvd
- https://www.auscert.org.au/bulletins/ESB-2019.3106/cnnvd
- https://www.us-cert.gov/ics/advisories/icsa-19-225-03cnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-100232.pdfenisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-100232.pdfVendor Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan