Uncontrolled resource consumption in Siemens SCALANCE X200-4P IRT
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-400.
Summary
A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALANCE X204IRT PRO, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208, SCALANCE X208PRO, SCALANCE X212-2, SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XF201-3P IRT, SCALANCE XF202-2P IRT, SCALANCE XF204, SCALANCE XF204-2, SCALANCE XF204-2BA IRT, SCALANCE XF204IRT, SCALANCE XF206-1, SCALANCE XF208, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIMATIC CP 343-1 Advanced, SIMATIC CP 442-1 RNA, SIMATIC CP 443-1, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC CP 443-1 RNA, SIMATIC RF180C, SIMATIC RF182C, SIPLUS NET CP 343-1 Advanced, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SIPLUS NET SCALANCE X308-2. The VxWorks-based Profinet TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SCALANCE X200-4P IRT | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE X201-3P IRT | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE X201-3P IRT PRO | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE X202-2IRT | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE X202-2P IRT | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE X202-2P IRT PRO | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE X204-2 | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X204-2FM | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X204-2LD | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X204-2LD TS | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X204-2TS | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X204IRT | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE X204IRT PRO | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE X206-1 | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X206-1LD | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X208 | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X208PRO | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X212-2 | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X212-2LD | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X216 | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X224 | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (230V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (230V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (24V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (24V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (2x 230V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (2x 230V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (2x 24V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (2x 24V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X304-2FE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X306-1LD FE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (230V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (230V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (24V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (24V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (2x 230V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (2x 230V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (2x 24V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (2x 24V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-3 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-3 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-3LD | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-3LD | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2LD | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2LD | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2LH | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2LH | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2LH+ | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2LH+ | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2M | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2M | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2M PoE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2M PoE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2M TS | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2M TS | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X310 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X310 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X310FE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X310FE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X320-1 FE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X320-1-2LD FE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X408-2 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XF201-3P IRT | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE XF202-2P IRT | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE XF204 | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE XF204-2 | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE XF204-2BA IRT | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE XF204IRT | before V5.5.0 | V5.5.0 | Patch available | CNA |
| Siemens | SCALANCE XF206-1 | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE XF208 | before V5.2.5 | V5.2.5 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (230V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (230V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (230V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (230V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M TS (24V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M TS (24V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M PoE (230V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M PoE (230V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M PoE (24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M PoE (24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M PoE TS (24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SIMATIC CP 343-1 Advanced | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC CP 442-1 RNA | before V1.5.18 | V1.5.18 | Patch available | CNA |
| Siemens | SIMATIC CP 443-1 | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIMATIC CP 443-1 | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIMATIC CP 443-1 Advanced | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIMATIC CP 443-1 RNA | before V1.5.18 | V1.5.18 | Patch available | CNA |
| Siemens | SIMATIC RF180C | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC RF182C | All versions | — | No fix listed | CNA |
| Siemens | SIPLUS NET CP 343-1 Advanced | All versions | — | No fix listed | CNA |
| Siemens | SIPLUS NET CP 443-1 | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIPLUS NET CP 443-1 Advanced | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIPLUS NET SCALANCE X308-2 | before V4.1.4 | V4.1.4 | Patch available | CNA |
- SCALANCE X200-4P IRT VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE X201-3P IRT VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE X201-3P IRT PRO VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE X202-2IRT VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE X202-2P IRT VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE X202-2P IRT PRO VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE X204-2 VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X204-2FM VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X204-2LD VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X204-2LD TS VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X204-2TS VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X204IRT VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE X204IRT PRO VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE X206-1 VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X206-1LD VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X208 VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X208PRO VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X212-2 VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X212-2LD VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X216 VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X224 VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE X302-7 EEC (230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (2x 230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (2x 230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (2x 24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (2x 24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X304-2FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X306-1LD FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (2x 230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (2x 230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (2x 24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (2x 24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-3 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-3 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-3LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-3LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2LH VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2LH VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2LH+ VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2LH+ VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2M VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2M VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2M PoE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2M PoE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2M TS VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2M TS VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X310 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X310 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X310FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X310FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X320-1 FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X320-1-2LD FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X408-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XF201-3P IRT VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE XF202-2P IRT VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE XF204 VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE XF204-2 VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE XF204-2BA IRT VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE XF204IRT VendorSiemens Affected before V5.5.0 Fixed in V5.5.0 Patch available CNA
- SCALANCE XF206-1 VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE XF208 VendorSiemens Affected before V5.2.5 Fixed in V5.2.5 Patch available CNA
- SCALANCE XR324-12M (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M TS (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M TS (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M PoE (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M PoE (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M PoE (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M PoE (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M PoE TS (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SIMATIC CP 343-1 Advanced VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC CP 442-1 RNA VendorSiemens Affected before V1.5.18 Fixed in V1.5.18 Patch available CNA
- SIMATIC CP 443-1 VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIMATIC CP 443-1 VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIMATIC CP 443-1 Advanced VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIMATIC CP 443-1 RNA VendorSiemens Affected before V1.5.18 Fixed in V1.5.18 Patch available CNA
- SIMATIC RF180C VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC RF182C VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIPLUS NET CP 343-1 Advanced VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIPLUS NET CP 443-1 VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIPLUS NET CP 443-1 Advanced VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIPLUS NET SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xf-200_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xf-200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:* | before 5.5.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x-200irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xf-200_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xf-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:* Versions before 5.5.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x-200irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_x-200irt_pro_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x-200irt_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x-300_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x-300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr-300_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr-300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_443-1_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_443-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_443-1_advanced:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf180c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf180c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf182c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf182c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_x-200irt_pro_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x-200irt_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x-300_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x-300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr-300_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr-300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_443-1_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_443-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_443-1_advanced:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf180c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf180c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf182c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf182c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SCALANCE X200-4P IRT (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE X201-3P IRT (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE X201-3P IRT PRO (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE X202-2IRT (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE X202-2P IRT (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE X202-2P IRT PRO (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE X204-2 (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X204-2FM (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X204-2LD (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X204-2LD TS (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X204-2TS (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X204IRT (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE X204IRT PRO (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE X206-1 (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X206-1LD (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X208 (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X208PRO (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X212-2 (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X212-2LD (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X216 (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X224 (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE X302-7 EEC (230V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (230V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (24V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (24V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (2x 230V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (2x 230V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (2x 24V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (2x 24V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X304-2FE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X306-1LD FE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (230V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (230V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (24V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (24V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (2x 230V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (2x 230V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (2x 24V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (2x 24V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-3 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-3 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-3LD (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-3LD (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2LD (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2LD (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2LH (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2LH (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2LH+ (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2LH+ (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2M (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2M (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2M PoE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2M PoE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2M TS (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2M TS (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X310 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X310 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X310FE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X310FE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X320-1 FE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X320-1-2LD FE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X408-2 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XF201-3P IRT (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE XF202-2P IRT (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE XF204 (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE XF204-2 (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE XF204-2BA IRT (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE XF204IRT (Siemens) Fixed in V5.5.0
- Fix · CNA SCALANCE XF206-1 (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE XF208 (Siemens) Fixed in V5.2.5
- Fix · CNA SCALANCE XR324-12M (230V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (230V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (230V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (230V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M TS (24V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M TS (24V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M PoE (230V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M PoE (230V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M PoE (24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M PoE (24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M PoE TS (24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SIMATIC CP 442-1 RNA (Siemens) Fixed in V1.5.18
- Fix · CNA SIMATIC CP 443-1 (Siemens) Fixed in V3.3
- Fix · CNA SIMATIC CP 443-1 (Siemens) Fixed in V3.3
- Fix · CNA SIMATIC CP 443-1 Advanced (Siemens) Fixed in V3.3
- Fix · CNA SIMATIC CP 443-1 RNA (Siemens) Fixed in V1.5.18
- Fix · CNA SIPLUS NET CP 443-1 (Siemens) Fixed in V3.3
- Fix · CNA SIPLUS NET CP 443-1 Advanced (Siemens) Fixed in V3.3
- Fix · CNA SIPLUS NET SCALANCE X308-2 (Siemens) Fixed in V4.1.4
Timeline
- 2026-10-02 Threatist record created from CVE-2019-19301
- 2026-10-03 Alias added: GHSA-j5jq-7977-4wm2
References
More Siemens Scalance X-200irt Firmware vulnerabilities
- TI-2019-10399 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 3.1HIGH 7.5
- TI-2019-08162 Uncontrolled resource consumption in Siemens SCALANCE X-200 switch family CVSS 3.1HIGH 8.6
- TI-2019-08144 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 3.1HIGH 7.5
- TI-2019-10380 Protection mechanism failure in Siemens SCALANCE S602 CVSS 3.1MEDIUM 5.4
- TI-2019-04621 Insufficiently protected credentials in Siemens SCALANCE X-200 switch family CVSS 3.1MEDIUM 5.5
Sources
- CVE-2019-19301 · CVE Program
- CVE-2019-19301 · NVD
- FIRST EPSS
- GHSA-j5jq-7977-4wm2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences