vulnwire
9.1crit

CVE-2019-6569

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network.

Published 7 y ago · modified 4 mo ago · JSON

CVSS
9.1
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
1.3%
percentile 71%
Public exploits
0
none known

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.

Exploit prediction (EPSS)

1.33% probability of exploitation in the next 30 days, higher than 71% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.19.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
NVD2.06.4AV:N/AC:L/Au:N/C:P/I:N/A:P

Affected products

  • Siemens SCALANCE X204-2
  • Siemens SCALANCE X204-2FM
  • Siemens SCALANCE X204-2LD
  • Siemens SCALANCE X204-2LD TS
  • Siemens SCALANCE X204-2TS
  • Siemens SCALANCE X206-1
  • Siemens SCALANCE X206-1LD
  • Siemens SCALANCE X208
  • Siemens SCALANCE X208PRO
  • Siemens SCALANCE X212-2
  • Siemens SCALANCE X212-2LD
  • Siemens SCALANCE X216
  • Siemens SCALANCE X224
  • Siemens SCALANCE X302-7 EEC (230V)
  • Siemens SCALANCE X302-7 EEC (230V, coated)
  • Siemens SCALANCE X302-7 EEC (24V)
  • Siemens SCALANCE X302-7 EEC (24V, coated)
  • Siemens SCALANCE X302-7 EEC (2x 230V)
  • Siemens SCALANCE X302-7 EEC (2x 230V, coated)
  • Siemens SCALANCE X302-7 EEC (2x 24V)
  • Siemens SCALANCE X302-7 EEC (2x 24V, coated)
  • Siemens SCALANCE X304-2FE
  • Siemens SCALANCE X306-1LD FE
  • Siemens SCALANCE X307-2 EEC (230V)
  • Siemens SCALANCE X307-2 EEC (230V, coated)
  • Siemens SCALANCE X307-2 EEC (24V)
  • Siemens SCALANCE X307-2 EEC (24V, coated)
  • Siemens SCALANCE X307-2 EEC (2x 230V)
  • Siemens SCALANCE X307-2 EEC (2x 230V, coated)
  • Siemens SCALANCE X307-2 EEC (2x 24V)
  • Siemens SCALANCE X307-2 EEC (2x 24V, coated)
  • Siemens SCALANCE X307-3
  • Siemens SCALANCE X307-3LD
  • Siemens SCALANCE X308-2
  • Siemens SCALANCE X308-2LD
  • Siemens SCALANCE X308-2LH
  • Siemens SCALANCE X308-2LH+
  • Siemens SCALANCE X308-2M
  • Siemens SCALANCE X308-2M PoE
  • Siemens SCALANCE X308-2M TS
  • Siemens SCALANCE X310
  • Siemens SCALANCE X310FE
  • Siemens SCALANCE X320-1 FE
  • Siemens SCALANCE X320-1-2LD FE
  • Siemens SCALANCE X408-2
  • Siemens SCALANCE XB205-3 (SC)
  • Siemens SCALANCE XB205-3 (ST/BFOC)
  • Siemens SCALANCE XB205-3LD
  • Siemens SCALANCE XB208
  • Siemens SCALANCE XB213-3 (SC)

Classification

Weakness
  • CWE-440 Expected Behavior Violation

References

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.