6.5

CVE-2019-10927

A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.

Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Scalance Xb-200 Firmware Version4.1
   Siemens ≫ Scalance Xb-200 Version-
Siemens ≫ Scalance Xc-200 Firmware Version4.1
   Siemens ≫ Scalance Xc-200 Version-
Siemens ≫ Scalance Xf-200ba Firmware Version4.1
   Siemens ≫ Scalance Xf-200ba Version-
Siemens ≫ Scalance Xp-200 Firmware Version4.1
   Siemens ≫ Scalance Xp-200 Version-
Siemens ≫ Scalance Xr-300wg Firmware Version4.1
   Siemens ≫ Scalance Xr-300wg Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.61% 0.672
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
CWE-703 Improper Check or Handling of Exceptional Conditions

The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.