CVE-2019-19301

CWE-400 — Uncontrolled Resource Consumption3 documents3 sources
Severity
7.5HIGH
EPSS
0.5%
top 32.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
66
Siemens Scalance X-200irt FirmwareSiemens Scalance X200-4p IRTSiemens Scalance X201-3p IRT+63 more
Timeline
PublishedApr 14
Latest updateMay 24

Description

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALANCE X204IRT PRO, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208, SCALANCE X208PRO, SCALANCE X212-2, SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages66 packages

▶CVEListV5siemens/scalance_x307-2_eec_(230v)All versions < V4.1.4
▶CVEListV5siemens/scalance_x307-2_eec_(2x_230v)All versions < V4.1.4
▶CVEListV5siemens/scalance_x302-7_eec_(230v)All versions < V4.1.4
▶CVEListV5siemens/scalance_x302-7_eec_(2x_230v)All versions < V4.1.4
▶CVEListV5siemens/scalance_x308-2lh+All versions < V4.1.4

🔴Vulnerability Details

2
GHSA
GHSA-j5jq-7977-4wm2: A vulnerability has been identified in SCALANCE X-200 switch family (incl↗2022-05-24
▶
CVEList
CVE-2019-19301: A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT,↗2020-04-14
▶