Denial-of-Service Vulnerability in SCALANCE Devices by Siemens

CVE-2019-10927

Summary

A vulnerability exists in several SCALANCE devices where an authenticated attacker with network access to port 22/tcp can trigger a Denial-of-Service (DoS) condition. This flaw allows the attacker to impact the device's availability without the need for user interaction. The affected models include SCALANCE SC-600, XB-200, XC-200, XF-200BA, XP-200, and XR-300WG. Mitigation steps should be taken to secure these devices against possible exploitation.

References