CVE-2019-6569

EUVD-2019-16128
The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
siemensscalance_x-200_firmware
𝑥
< 5.2.4
siemensscalance_x-300_firmware
𝑥
< 4.1.3
siemensscalance_xp-200_firmware
𝑥
< 4.1
siemensscalance_xc-200_firmware
𝑥
< 4.1
siemensscalance_xf-200_firmware
𝑥
< 4.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://cert-portal.siemens.com/productcert/pdf/ssa-557804.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-557804.pdf