What is the CVSS score of CVE-2019-6569?

CVE-2019-6569 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H. EPSS exploitation probability: 1.3%.

Is there a patch available for CVE-2019-6569?

Yes, a patch is available for CVE-2019-6569. Update the affected software to the latest version immediately.

Scalance X 200 Firmware CVE-2019-6569

CRITICAL

Expected Behavior Violation (CWE-440)

2019-03-26 productcert@siemens.com

Information Disclosure Scalance X 200 Firmware Scalance X 300 Firmware Scalance Xp 200 Firmware Scalance Xc 200 Firmware Scalance Xf 200 Firmware

9.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Mar 26, 2019 - 22:29 nvd

CRITICAL 9.1

DescriptionNVD

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.

AnalysisAI

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-440. The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior. Affected products include: Siemens Scalance X-200 Firmware, Siemens Scalance X-300 Firmware, Siemens Scalance Xp-200 Firmware, Siemens Scalance Xc-200 Firmware, Siemens Scalance Xf-200 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.