CVE-2019-6567: falha em Siemens SCALANCE X-200 switch family (incl.
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.3%
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X-414-3E (All versions). The affected devices store passwords in a recoverable format. An attacker may extract and recover device passwords from the device configuration. Successful exploitation requires access to a device configuration backup and impacts confidentiality of the stored passwords.
Produtos afetados
Siemens · SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)Siemens · SCALANCE X-200 switch family (incl. SIPLUS NET variants)Siemens · SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)Siemens · SCALANCE X-414-3ECVEs relacionadas — Siemens SCALANCE X-200 switch family (incl.
No mesmo produto, das mais perigosas para as menos.