Read the docs
TI-2019-10388 Aliases CVE-2019-13933GHSA-5vx5-pc42-77fx

Missing authentication in Siemens SCALANCE X204RNA

Priority MEDIUM 40CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Low · High · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-306.

Summary

A vulnerability has been identified in SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices contain a vulnerability that allows an unauthenticated attacker to violate access-control rules. The vulnerability can be triggered by sending GET request to specific uniform resource locator on the web configuration interface of the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. An attacker could use the vulnerability to obtain sensitive information or change the device configuration. At the time of advisory publication no public exploitation of this security vulnerability was known.

Why it matters now

EPSS 0.01389 72nd percentileScored 2026-11-07
Fix Fixed SCALANCE X204RNA (HSR) (Siemens): V3.2.7SCALANCE X204RNA (PRP) (Siemens): V3.2.7+54 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSCALANCE X204RNA (HSR)before V3.2.7V3.2.7Patch availableCNA
SiemensSCALANCE X204RNA (PRP)before V3.2.7V3.2.7Patch availableCNA
SiemensSCALANCE X204RNA EEC (HSR)before V3.2.7V3.2.7Patch availableCNA
SiemensSCALANCE X204RNA EEC (PRP)before V3.2.7V3.2.7Patch availableCNA
SiemensSCALANCE X204RNA EEC (PRP/HSR)before V3.2.7V3.2.7Patch availableCNA
SiemensSCALANCE X302-7 EEC (230V)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X302-7 EEC (230V, coated)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X302-7 EEC (24V)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X302-7 EEC (24V, coated)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 230V)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 230V, coated)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 24V)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 24V, coated)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X304-2FEbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X306-1LD FEbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X307-2 EEC (230V)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X307-2 EEC (230V, coated)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X307-2 EEC (24V)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X307-2 EEC (24V, coated)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 230V)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 230V, coated)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 24V)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 24V, coated)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X307-3before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X307-3before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X307-3LDbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X307-3LDbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2LDbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2LDbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2LHbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2LHbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2LH+before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2LH+before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2Mbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2Mbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2M PoEbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2M PoEbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2M TSbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X308-2M TSbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X310before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X310before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X310FEbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X310FEbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X320-1 FEbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X320-1-2LD FEbefore V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE X408-2before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-12M TS (24V)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-12M TS (24V)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M PoE (230V, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M PoE (230V, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M PoE (24V, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M PoE (24V, ports on rear)before V4.1.3V4.1.3Patch availableCNA
SiemensSCALANCE XR324-4M PoE TS (24V, ports on front)before V4.1.3V4.1.3Patch availableCNA
SiemensSIPLUS NET SCALANCE X308-2before V4.1.3V4.1.3Patch availableCNA
  • SCALANCE X204RNA (HSR) VendorSiemens Affected before V3.2.7 Fixed in V3.2.7 Patch available CNA
  • SCALANCE X204RNA (PRP) VendorSiemens Affected before V3.2.7 Fixed in V3.2.7 Patch available CNA
  • SCALANCE X204RNA EEC (HSR) VendorSiemens Affected before V3.2.7 Fixed in V3.2.7 Patch available CNA
  • SCALANCE X204RNA EEC (PRP) VendorSiemens Affected before V3.2.7 Fixed in V3.2.7 Patch available CNA
  • SCALANCE X204RNA EEC (PRP/HSR) VendorSiemens Affected before V3.2.7 Fixed in V3.2.7 Patch available CNA
  • SCALANCE X302-7 EEC (230V) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X302-7 EEC (230V, coated) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X302-7 EEC (24V) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X302-7 EEC (24V, coated) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X302-7 EEC (2x 230V) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X302-7 EEC (2x 230V, coated) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X302-7 EEC (2x 24V) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X302-7 EEC (2x 24V, coated) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X304-2FE VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X306-1LD FE VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X307-2 EEC (230V) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X307-2 EEC (230V, coated) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X307-2 EEC (24V) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X307-2 EEC (24V, coated) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X307-2 EEC (2x 230V) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X307-2 EEC (2x 230V, coated) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X307-2 EEC (2x 24V) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X307-2 EEC (2x 24V, coated) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X307-3 VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X307-3 VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X307-3LD VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X307-3LD VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2 VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2 VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2LD VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2LD VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2LH VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2LH VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2LH+ VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2LH+ VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2M VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2M VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2M PoE VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2M PoE VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2M TS VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X308-2M TS VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X310 VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X310 VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X310FE VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X310FE VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X320-1 FE VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X320-1-2LD FE VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE X408-2 VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-12M TS (24V) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-12M TS (24V) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M PoE (230V, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M PoE (230V, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M PoE (24V, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M PoE (24V, ports on rear) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SCALANCE XR324-4M PoE TS (24V, ports on front) VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA
  • SIPLUS NET SCALANCE X308-2 VendorSiemens Affected before V4.1.3 Fixed in V4.1.3 Patch available CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:o:siemens:scalance_x-200rna_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:h:siemens:scalance_x-200rna:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x204rna_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:h:siemens:scalance_x204rna:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x-300_firmware:*:*:*:*:*:*:*:*before 4.1.3VulnerableSiemens
cpe:2.3:h:siemens:scalance_x-300:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:*before 4.1.3VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr-300_firmware:*:*:*:*:*:*:*:*before 4.1.3VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr-300:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:scalance_x-200rna_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x-200rna:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x204rna_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x204rna:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x-300_firmware:*:*:*:*:*:*:*:* Versions before 4.1.3 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x-300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:* Versions before 4.1.3 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr-300_firmware:*:*:*:*:*:*:*:* Versions before 4.1.3 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr-300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:*before 4.1.3VulnerableSiemens
cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:siplus_net_csm_1277_firmware:*:*:*:*:*:*:*:*before 4.1.3VulnerableSiemens
cpe:2.3:h:siemens:siplus_net_csm_1277:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.3 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:siplus_net_csm_1277_firmware:*:*:*:*:*:*:*:* Versions before 4.1.3 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:siplus_net_csm_1277:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

  • Fix · CNA SCALANCE X204RNA (HSR) (Siemens) Fixed in V3.2.7
  • Fix · CNA SCALANCE X204RNA (PRP) (Siemens) Fixed in V3.2.7
  • Fix · CNA SCALANCE X204RNA EEC (HSR) (Siemens) Fixed in V3.2.7
  • Fix · CNA SCALANCE X204RNA EEC (PRP) (Siemens) Fixed in V3.2.7
  • Fix · CNA SCALANCE X204RNA EEC (PRP/HSR) (Siemens) Fixed in V3.2.7
  • Fix · CNA SCALANCE X302-7 EEC (230V) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X302-7 EEC (230V, coated) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X302-7 EEC (24V) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X302-7 EEC (24V, coated) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X302-7 EEC (2x 230V) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X302-7 EEC (2x 230V, coated) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X302-7 EEC (2x 24V) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X302-7 EEC (2x 24V, coated) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X304-2FE (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X306-1LD FE (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X307-2 EEC (230V) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X307-2 EEC (230V, coated) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X307-2 EEC (24V) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X307-2 EEC (24V, coated) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X307-2 EEC (2x 230V) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X307-2 EEC (2x 230V, coated) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X307-2 EEC (2x 24V) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X307-2 EEC (2x 24V, coated) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X307-3 (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X307-3 (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X307-3LD (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X307-3LD (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2 (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2 (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2LD (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2LD (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2LH (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2LH (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2LH+ (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2LH+ (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2M (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2M (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2M PoE (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2M PoE (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2M TS (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X308-2M TS (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X310 (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X310 (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X310FE (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X310FE (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X320-1 FE (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X320-1-2LD FE (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE X408-2 (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-12M (230V, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-12M (230V, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-12M (230V, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-12M (230V, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-12M (24V, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-12M (24V, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-12M (24V, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-12M (24V, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-12M TS (24V) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-12M TS (24V) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M PoE (230V, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M PoE (230V, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M PoE (24V, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M PoE (24V, ports on rear) (Siemens) Fixed in V4.1.3
  • Fix · CNA SCALANCE XR324-4M PoE TS (24V, ports on front) (Siemens) Fixed in V4.1.3
  • Fix · CNA SIPLUS NET SCALANCE X308-2 (Siemens) Fixed in V4.1.3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-13933
  2. 2026-10-03 Alias added: GHSA-5vx5-pc42-77fx

References

Advisory 2

  • TI-2019-08162 Uncontrolled resource consumption in Siemens SCALANCE X-200 switch family CVSS 3.1HIGH 8.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences