High ICSA-20-042-10 3 CVEs

Siemens SCALANCE S-600 (Update B)

Published Feb 11, 2020 · Updated May 6, 2025 · Revision 4

Vendor: Siemens Product: SCALANCE S602 Product: SCALANCE S612 Product: SCALANCE S623 Product: SCALANCE S627-2M

Summary

The firmware for SCALANCE S-600 family devices contains multiple web vulnerabilities. The vulnerabilities could allow an remote attacker to conduct Denial-of-Service attacks or perform Cross-Site Scripting attacks.

Siemens has released updates for the affected products and recommends to update to the latest versions, or to upgrade to a successor product.

Vulnerabilities 3

Unscored —

CVE-2019-13925

A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= …

Siemens SCALANCE S602 SCALANCE S623 SCALANCE S612 ICS / OT

Feb 11, 2020
Unscored —

CVE-2019-13926

A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= …

Siemens SCALANCE S612 SCALANCE S627-2M SCALANCE S602 ICS / OT

Feb 11, 2020
Unscored —

CVE-2019-6585

A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= …

Siemens SCALANCE S602 SCALANCE S623 SCALANCE S612 ICS / OT

Mar 10, 2020

Revision history

2025-05-06 #4
Revision - Fixing typos
2021-04-13 #3
Added solution for SCALANCE S602, SCALANCE S612, SCALANCE S623, and SCALANCE S627-2M
2020-08-11 #2
Informed about successor products for the SCALANCE S-600 family
2020-02-11 #1
Publication Date

References

SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-591405.txt
SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-591405.pdf
ICS Advisory ICSA-20-042-10 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-042-10
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B