Protection mechanism failure in Siemens SCALANCE S602
Priority LOW 26CWE-693Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Security bypass, Spoofing
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-693 and CWE-1021.
Summary
A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1), SCALANCE S623 (All versions < V4.1), SCALANCE S627-2M (All versions < V4.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < 5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < 4.1.3). The device does not send the X-Frame-Option Header in the administrative web interface, which makes it vulnerable to Clickjacking attacks. The security vulnerability could be exploited by an attacker that is able to trick an administrative user with a valid session on the target device into clicking on a website controlled by the attacker. The vulnerability could allow an attacker to perform administrative actions via the web interface.
Why it matters now
EPSS 0.00825 57th percentileScored 2026-11-07
Fix Fixed SCALANCE S602 (Siemens): V4.1SCALANCE S612 (Siemens): V4.1+6 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SCALANCE S602 | before V4.1 | V4.1 | Patch available | CNA |
| Siemens | SCALANCE S612 | before V4.1 | V4.1 | Patch available | CNA |
| Siemens | SCALANCE S623 | before V4.1 | V4.1 | Patch available | CNA |
| Siemens | SCALANCE S627-2M | before V4.1 | V4.1 | Patch available | CNA |
| Siemens | SCALANCE X-200 switch family (incl. SIPLUS NET variants) | before 5.2.4 | 5.2.4 | Patch available | CNA |
| Siemens | SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE X-200RNA switch family | before V3.2.7 | V3.2.7 | Patch available | CNA |
| Siemens | SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) | before 4.1.3 | 4.1.3 | Patch available | CNA |
- SCALANCE S602 VendorSiemens Affected before V4.1 Fixed in V4.1 Patch available CNA
- SCALANCE S612 VendorSiemens Affected before V4.1 Fixed in V4.1 Patch available CNA
- SCALANCE S623 VendorSiemens Affected before V4.1 Fixed in V4.1 Patch available CNA
- SCALANCE S627-2M VendorSiemens Affected before V4.1 Fixed in V4.1 Patch available CNA
- SCALANCE X-200 switch family (incl. SIPLUS NET variants) VendorSiemens Affected before 5.2.4 Fixed in 5.2.4 Patch available CNA
- SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE X-200RNA switch family VendorSiemens Affected before V3.2.7 Fixed in V3.2.7 Patch available CNA
- SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) VendorSiemens Affected before 4.1.3 Fixed in 4.1.3 Patch available CNA
CPE configurations NVD · 16
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:* | before 5.2.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xf-200_firmware:*:*:*:*:*:*:*:* | before 5.2.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xf-200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:* | before 5.2.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x-200irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:* | before 5.2.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:* Versions before 5.2.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xf-200_firmware:*:*:*:*:*:*:*:* Versions before 5.2.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xf-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:* Versions before 5.2.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x-200irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:* Versions before 5.2.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 6 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:* | before 4.1.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x-300_firmware:*:*:*:*:*:*:*:* | before 4.1.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x-300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr-300_firmware:*:*:*:*:*:*:*:* | before 4.1.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr-300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:* Versions before 4.1.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x-300_firmware:*:*:*:*:*:*:*:* Versions before 4.1.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x-300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr-300_firmware:*:*:*:*:*:*:*:* Versions before 4.1.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr-300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SCALANCE S602 (Siemens) Fixed in V4.1
- Fix · CNA SCALANCE S612 (Siemens) Fixed in V4.1
- Fix · CNA SCALANCE S623 (Siemens) Fixed in V4.1
- Fix · CNA SCALANCE S627-2M (Siemens) Fixed in V4.1
- Fix · CNA SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Siemens) Fixed in 5.2.4
- Fix · CNA SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE X-200RNA switch family (Siemens) Fixed in V3.2.7
- Fix · CNA SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (Siemens) Fixed in 4.1.3
Timeline
- 2026-10-02 Threatist record created from CVE-2019-13924
- 2026-10-03 Alias added: GHSA-9v8p-c94c-q287
References
More Siemens Scalance X-200irt Firmware vulnerabilities
- TI-2019-10399 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 3.1HIGH 7.5
- TI-2019-08162 Uncontrolled resource consumption in Siemens SCALANCE X-200 switch family CVSS 3.1HIGH 8.6
- TI-2019-13921 Uncontrolled resource consumption in Siemens SCALANCE X200-4P IRT CVSS 3.1HIGH 7.5
- TI-2019-08144 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 3.1HIGH 7.5
- TI-2019-04621 Insufficiently protected credentials in Siemens SCALANCE X-200 switch family CVSS 3.1MEDIUM 5.5
Sources
- CVE-2019-13924 · CVE Program
- CVE-2019-13924 · NVD
- FIRST EPSS
- GHSA-9v8p-c94c-q287 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences