Siemens AG SCALANCE SC-600
En bref
- Source
- NVD
- EPSS
- EPSS 1.17 % · centile 67 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- siemens
- Statut NVD
- Modified
Description
A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.
Faiblesses (CWE)
- CWE-703 — Improper Check or Handling of Exceptional Conditions
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 4.0 | AV:N/AC:L/Au:S/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2019-2641
- GCVE · GCVE-0-2019-10927
Avis du CERT-FR
- CERTFR-2019-AVI-385 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:siemens:scalance_xb-200_firmware:4.1:*:*:*:*:*:*:*cpe:2.3:o:siemens:scalance_xc-200_firmware:4.1:*:*:*:*:*:*:*cpe:2.3:o:siemens:scalance_xf-200ba_firmware:4.1:*:*:*:*:*:*:*cpe:2.3:o:siemens:scalance_xp-200_firmware:4.1:*:*:*:*:*:*:*cpe:2.3:o:siemens:scalance_xr-300wg_firmware:4.1:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Siemens AG · SCALANCE SC-600 | affected V2.0 |
| Siemens AG · SCALANCE XB-200 | affected V4.1 |
| Siemens AG · SCALANCE XC-200 | affected V4.1 |
| Siemens AG · SCALANCE XF-200BA | affected V4.1 |
| Siemens AG · SCALANCE XP-200 | affected V4.1 |
| Siemens AG · SCALANCE XR-300WG | affected V4.1 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |