CVE-2019-6569

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
siemensCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
VendorProductVersion
siemensscalance_x-200_firmware
𝑥
< 5.2.4
siemensscalance_x-300_firmware
𝑥
< 4.1.3
siemensscalance_xp-200_firmware
𝑥
< 4.1
siemensscalance_xc-200_firmware
𝑥
< 4.1
siemensscalance_xf-200_firmware
𝑥
< 4.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://cert-portal.siemens.com/productcert/pdf/ssa-557804.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-557804.pdf