CVE-2019-6569 Other in SCALANCE X204-2
Attackers can bypass monitor barriers to inject malicious packets into mirrored networks, potentially altering system configuration and runtime behavior.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-6569?
CVE-2019-6569 is a critical vulnerability in Siemens SCALANCE X204-2, published on 26 Mar 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.
Weakness: CWE-440
Which versions are affected by CVE-2019-6569?
It affects 5 products.
Products include Siemens Scalance X-200 Firmware, Siemens Scalance X-300 Firmware, Siemens Scalance Xc-200 Firmware, Siemens Scalance Xf-200 Firmware, Siemens Scalance Xp-200 Firmware.
How do I fix CVE-2019-6569?
No fix has been published for CVE-2019-6569 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-6569 being exploited?
There is no known exploitation of CVE-2019-6569 in the wild and no public exploit code.
Other vulnerabilities in Siemens SCALANCE X204-2
Sources
Also known as GHSA-pq3w-wpr9-q68m.