CVE-2019-10942

mediumpriority · track · 34EPSS 0.014 · 72 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.36% (72nd) EPSS

CVSS 5 · medium

Is it mine?

27 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X204RNA (HSR) (All versions), SCALANCE X204RNA (PRP) (All versions), SCALANCE X204RNA EEC (HSR) (All versions), SCALANCE X204RNA EEC (PRP) (All versions), SCALANCE X204RNA EEC (PRP/HSR) (All versions). The device contains a vulnerability that could allow an attacker to trigger a denial-of-service condition by sending large message packages repeatedly to the telnet service. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSCALANCE X-200 switch family (incl. SIPLUS NET variants)siemens_psirt
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/
FixedSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)siemens_psirt
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/
MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)siemens_psirt
Disable telnet service on affected devices and use SSH instead
MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)siemens_psirt
Disable telnet service on affected devices and use SSH instead
MitigationSCALANCE X204RNA (HSR)siemens_psirt
Disable telnet service on affected devices and use SSH instead
MitigationSCALANCE X204RNA (PRP)siemens_psirt
Disable telnet service on affected devices and use SSH instead
MitigationSCALANCE X204RNA EEC (HSR)siemens_psirt
Disable telnet service on affected devices and use SSH instead
MitigationSCALANCE X204RNA EEC (PRP)siemens_psirt
Disable telnet service on affected devices and use SSH instead
MitigationSCALANCE X204RNA EEC (PRP/HSR)siemens_psirt
Disable telnet service on affected devices and use SSH instead
MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)cisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
MitigationSCALANCE X-200RNAcisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
MitigationSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)cisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
MitigationSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)cisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
MitigationSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)cisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
MitigationSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)cisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
MitigationSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)cisa_csaf_ot
Siemens recommends users configure their environment according to Siemens ' operational guidelines for industrial security and follow the recommendations in the product manuals.
https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
No fix plannedSCALANCE X204RNA (HSR)siemens_psirt
Currently no remediation is planned
No fix plannedSCALANCE X204RNA (PRP)siemens_psirt
Currently no remediation is planned
No fix plannedSCALANCE X204RNA EEC (HSR)siemens_psirt
Currently no remediation is planned
No fix plannedSCALANCE X204RNA EEC (PRP)siemens_psirt
Currently no remediation is planned
No fix plannedSCALANCE X204RNA EEC (PRP/HSR)siemens_psirt
Currently no remediation is planned

cvss

Technical severity, 0–10. One row per scoring source.

8.6

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–8.6

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 2.9

v3.18.6highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 4

v3.08.6highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · CISA US

v3.18.6highAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.18.6highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:T/RC:Csecondary · Siemens ProductCERT DE

v3.17.9highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USCWE-400USCWE-400USCWE-410USCWE-410US

affected products (27)

Products and version ranges known to be affected.

SCALANCE X-200RNA: All versionsall versionscisa_csaf_otUS
Siemens SCALANCE X-200RNAall versionscisa_csaf_otUS
Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants)All versions → V5.2.5enisa_euvdEU
Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)All versions → V5.5.0enisa_euvdEU
Siemens SCALANCE X204RNA (HSR)≤ All versionsenisa_euvdEU
Siemens SCALANCE X204RNA (PRP)≤ All versionsenisa_euvdEU
Siemens SCALANCE X204RNA EEC (HSR)≤ All versionsenisa_euvdEU
Siemens SCALANCE X204RNA EEC (PRP)≤ All versionsenisa_euvdEU
Siemens SCALANCE X204RNA EEC (PRP/HSR)≤ All versionsenisa_euvdEU
Siemens AG SCALANCE X-200≤ 5.2.5fstec_bduRU
Siemens AG SCALANCE X-200 IRT≤ 5.5.0fstec_bduRU
Siemens AG SCALANCE X-204RNAall versionsfstec_bduRU
siemens scalance x-200 firmwareall versionsnvdUScpe:2.3:o:siemens:scalance_x-200_firmware:*:*:*:*:*:*:*:*
siemens scalance x-200irt firmwareall versionsnvdUScpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:*
siemens scalance x-200rna firmwareall versionsnvdUScpe:2.3:o:siemens:scalance_x-200rna_firmware:*:*:*:*:*:*:*:*
Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants)< V5.2.5siemens_psirtDE
Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)< V5.5.0siemens_psirtDE
Siemens SCALANCE X204RNA (HSR)≤ vers:all/*siemens_psirtDE
Siemens SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)≤ vers:all/*siemens_psirtDE
Siemens SCALANCE X204RNA (PRP)≤ vers:all/*siemens_psirtDE

showing 20 of 27

advisories (2)

Vendor and ecosystem advisories describing this.

SSA-100232SSA-100232: Denial-of-Service vulnerability in SCALANCE X Switches2019-08-13csaf · siemens_psirtDE
A vulnerability in several SCALANCE X devices could allow an unauthenticated attacker with network access to an affected device to perform a denial-of-service. Siemens has released an update for SCALANCE X-200IRT and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
ICSA-19-225-03ICSA-19-225-03_Siemens SCALANCE X Switches (Update D)2019-08-13icsa · cisa_csaf_otUS
Younes Dragoni and Alessandro Di Pinto from Nozomi Networks and Artem Zinenko from Kaspersky reported these vulnerability details to Siemens.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot nvd siemens_psirt NVD CVE.org MITRE

published 2019-08-13modified 2026-06-17

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan