Vulnetix
Try Vulnetix Request Demo
CVE-2019-6567 PUBLISHED CVSS 5.5 MEDIUM

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X-414-3E (All versions). The affected devices store passwords in a recoverable format. An attacker may extract and recover device passwords from the device configuration. Successful exploitation requires access to a device configuration backup and impacts confidentiality of the stored passwords.

EPSS 0.11% · 29.4th percentile

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.11%
29.4th percentile

Affected Products

VendorProductVersions
SiemensSCALANCE X-200 switch family (incl. SIPLUS NET variants)All Versions < V5.2.4
siemensscalance_x-200_firmware0
SiemensSCALANCE X-414-3EAll versions
siemensscalance_x-300_firmware
SiemensSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)All versions < V4.1.3
siemensscalance_x-414-3e_firmware
SiemensSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)All versions < V5.5.0
siemensscalance_x-200irt_firmware

Timeline

References

Open in Interactive Console →