CVE Feed

    Dashboard / CVE / CVE-2019-6567

    CVE-2019-6567

    A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X-414-3E (All versions). The affected devices store passwords in a recoverable format. An attacker may extract and recover device passwords from the device configuration. Successful exploitation requires access to a device configuration backup and impacts confidentiality of the stored passwords.

    Published:Jun 12, 2019
    Last Modified:Nov 21, 2024
    EPS:Jun 12, 2019
    EPSS Score:0.00111
    CVSS Score:5.5

    Affected Products

    Vendor
    Siemens
    Product
    Scalance X-200
    Vendor
    Siemens
    Product
    Scalance X-200 Firmware
    Vendor
    Siemens
    Product
    Scalance X-200irt
    Vendor
    Siemens
    Product
    Scalance X-200irt Firmware
    Vendor
    Siemens
    Product
    Scalance X-300
    Vendor
    Siemens
    Product
    Scalance X-300 Firmware
    Vendor
    Siemens
    Product
    Scalance X-414-3e
    Vendor
    Siemens
    Product
    Scalance X-414-3e Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High