CVE-2019-10927

A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:siemens:scalance_xb-200_firmware:4.1:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:siemens:scalance_xc-200_firmware:4.1:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:scalance_xf-200ba_firmware:4.1:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf-200ba:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:siemens:scalance_xp-200_firmware:4.1:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:siemens:scalance_xr-300wg_firmware:4.1:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:*

History

28 Oct 2021, 13:32

Type Values Removed Values Added
CWE CWE-20 NVD-CWE-Other
References (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdf - Vendor Advisory (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdf - Patch, Vendor Advisory

Information

Published : 2019-08-13 19:15

Updated : 2023-12-10 12:59


NVD link : CVE-2019-10927

Mitre link : CVE-2019-10927

CVE.ORG link : CVE-2019-10927


JSON object : View

Products Affected

siemens

  • scalance_xr-300wg_firmware
  • scalance_xr-300wg
  • scalance_xp-200_firmware
  • scalance_xc-200
  • scalance_xb-200
  • scalance_xc-200_firmware
  • scalance_xb-200_firmware
  • scalance_xf-200ba
  • scalance_xf-200ba_firmware
  • scalance_xp-200
CWE
NVD-CWE-Other CWE-703

Improper Check or Handling of Exceptional Conditions