CVE Feed

    Dashboard / CVE / CVE-2019-10927

    CVE-2019-10927

    A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.

    Published:Aug 13, 2019
    Last Modified:Nov 21, 2024
    EPS:Aug 13, 2019
    EPSS Score:0.00609
    CVSS Score:6.5

    Affected Products

    Vendor
    Siemens
    Product
    Scalance Xb-200
    Vendor
    Siemens
    Product
    Scalance Xb-200 Firmware
    Vendor
    Siemens
    Product
    Scalance Xc-200
    Vendor
    Siemens
    Product
    Scalance Xc-200 Firmware
    Vendor
    Siemens
    Product
    Scalance Xf-200ba
    Vendor
    Siemens
    Product
    Scalance Xf-200ba Firmware
    Vendor
    Siemens
    Product
    Scalance Xp-200
    Vendor
    Siemens
    Product
    Scalance Xp-200 Firmware
    Vendor
    Siemens
    Product
    Scalance Xr-300wg
    Vendor
    Siemens
    Product
    Scalance Xr-300wg Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-36325 (CVSS 6.8) — Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This co…
    CVE-2022-36324 (CVSS 7.5) — Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthent…
    CVE-2022-36323 (CVSS 9.1) — Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker w…
    CVE-2020-28400 (CVSS 8.7) — Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of servic…
    CVE-2021-3449 (CVSS 5.9) — An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.…
    CVE-2021-25667 (CVSS 8.8) — A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All…
    CVE-2019-19301 (CVSS 7.5) — A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, S…
    CVE-2019-13946 (CVSS 7.5) — Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multipl…
    CVE-2019-13924 (CVSS 5.4) — A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1…
    CVE-2017-12736 (CVSS 8.8) — After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device unde…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High