Critical severity · published Mar 26, 2019
CVE-2019-6569
The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network
9.1
CVSS
1.3%
EPSS
No
On KEV
Description
The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SX
Scalance X-200 Firmware · Siemens
before 5.2.4 · source: NVD
SX
Scalance X-300 Firmware · Siemens
before 4.1.3 · source: NVD
SX
Scalance Xc-200 Firmware · Siemens
before 4.1 · source: NVD
SX
Scalance Xf-200 Firmware · Siemens
before 4.1 · source: NVD
SX
Scalance Xp-200 Firmware · Siemens
before 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-6569
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-6569
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-557804.pdf
More from Scalance X-200 Firmware
8.6
CVE-2019-10942
A vulnerability has been identified in SCALANCE X-200 switch family (incl
6.1
CVE-2018-4848
A vulnerability has been identified in SCALANCE X-200 switch family (incl
5.5
CVE-2019-6567
A vulnerability has been identified in SCALANCE X-200 switch family (incl