Insufficiently protected credentials in Siemens SCALANCE X-200 switch family
Priority LOW 25CWE-257Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-522.
Summary
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X-414-3E (All versions). The affected devices store passwords in a recoverable format. An attacker may extract and recover device passwords from the device configuration. Successful exploitation requires access to a device configuration backup and impacts confidentiality of the stored passwords.
Why it matters now
EPSS 0.00301 22nd percentileScored 2026-11-07
Fix Fixed SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Siemens): V5.2.4SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (Siemens): V5.5.0+1 more product
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SCALANCE X-200 switch family (incl. SIPLUS NET variants) | before V5.2.4 | V5.2.4 | Patch available | CNA |
| Siemens | SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) | before V4.1.3 | V4.1.3 | Patch available | CNA |
| Siemens | SCALANCE X-414-3E | All versions | — | No fix listed | CNA |
- SCALANCE X-200 switch family (incl. SIPLUS NET variants) VendorSiemens Affected before V5.2.4 Fixed in V5.2.4 Patch available CNA
- SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
- SCALANCE X-414-3E VendorSiemens Affected All versions Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_x-200_firmware:*:*:*:*:*:*:*:* | before 5.2.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x-200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x-200irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x-300_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x-300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x-414-3e_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x-414-3e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_x-200_firmware:*:*:*:*:*:*:*:* Versions before 5.2.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x-200irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x-300_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x-300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x-414-3e_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x-414-3e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Siemens) Fixed in V5.2.4
- Fix · CNA SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (Siemens) Fixed in V4.1.3
Timeline
- 2026-10-02 Threatist record created from CVE-2019-6567
- 2026-10-03 Alias added: GHSA-9mw7-3797-xp7x
References
More Siemens Scalance X-200 Firmware vulnerabilities
- TI-2019-04623 The monitor barrier of the affected products insufficiently blocks data from being… CVSS 3.1CRITICAL 9.1
- TI-2019-08162 Uncontrolled resource consumption in Siemens SCALANCE X-200 switch family CVSS 3.1HIGH 8.6
- TI-2018-03425 Cross-site scripting in Siemens SCALANCE X-200 switch family CVSS 3.0MEDIUM 6.1
Sources
- CVE-2019-6567 · CVE Program
- CVE-2019-6567 · NVD
- FIRST EPSS
- GHSA-9mw7-3797-xp7x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences