CVE-2019-10927

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-08-13 · updated 2026-06-17
Weakness: CWE-703

Description

A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.

Affected products

Siemens Scalance Xb-200 Firmware: 4.1
Siemens Scalance Xc-200 Firmware: 4.1
Siemens Scalance Xf-200Ba Firmware: 4.1
Siemens Scalance Xp-200 Firmware: 4.1
Siemens Scalance Xr-300Wg Firmware: 4.1

References

https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdf

Get alerted when CVE-2019-10927 or the next vulnerability affects your stack