What is the CVSS score of CVE-2019-10927?

CVE-2019-10927 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 1.2%.

Is there a patch available for CVE-2019-10927?

Yes, a patch is available for CVE-2019-10927. Update the affected software to the latest version immediately.

Scalance Xb 200 Firmware CVE-2019-10927

MEDIUM

Improper Check or Handling of Exceptional Conditions (CWE-703)

2019-08-13 productcert@siemens.com

Siemens Information Disclosure Scalance Xb 200 Firmware Scalance Xc 200 Firmware Scalance Xf 200Ba Firmware Scalance Xp 200 Firmware Scalance Xr 300Wg Firmware

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Aug 13, 2019 - 19:15 nvd

MEDIUM 6.5

DescriptionNVD

A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-703. A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device. Affected products include: Siemens Scalance Xb-200 Firmware, Siemens Scalance Xc-200 Firmware, Siemens Scalance Xf-200Ba Firmware, Siemens Scalance Xp-200 Firmware, Siemens Scalance Xr-300Wg Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.