CVE-2019-6585CWE-80

CVE-2019-6585: falha em Siemens SCALANCE S602

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SCALANCE S602+ Monitorar SCALANCE S612

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.7%
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V4.1), SCALANCE S627-2M (All versions >= V3.0 and < V4.1). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed.
Produtos afetados
Siemens · SCALANCE S602Siemens · SCALANCE S612Siemens · SCALANCE S623Siemens · SCALANCE S627-2M
CVEs relacionadas — Siemens SCALANCE S602

No mesmo produto, das mais perigosas para as menos.

CVE-2019-13926—CVE-2019-13926EPSS 1.5%CVE-2019-13925—CVE-2019-13925EPSS 1.5%CVE-2019-13924—CVE-2019-13924EPSS 0.8%