CVE-2019-6569

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-03-26 · updated 2026-06-17
Weakness: CWE-440

Description

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.

Affected products

Siemens Scalance X-200 Firmware: before 5.2.4 — fixed in 5.2.4
Siemens Scalance X-300 Firmware: before 4.1.3 — fixed in 4.1.3
Siemens Scalance Xc-200 Firmware: before 4.1 — fixed in 4.1
Siemens Scalance Xf-200 Firmware: before 4.1 — fixed in 4.1
Siemens Scalance Xp-200 Firmware: before 4.1 — fixed in 4.1

How to fix

Upgrade to a fixed version: Siemens Scalance X-200 Firmware 5.2.4; Siemens Scalance X-300 Firmware 4.1.3; Siemens Scalance Xc-200 Firmware 4.1; Siemens Scalance Xf-200 Firmware 4.1; Siemens Scalance Xp-200 Firmware 4.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-6569 or the next vulnerability affects your stack