Skip to content
OpenAdvisories
Medium SSA-557804 1 CVE

SSA-557804: Mirror Port Isolation Vulnerability in SCALANCE X Switches

Published Mar 12, 2019 · Updated Jul 12, 2022 · Revision 5

Vendor: Siemens Product: SCALANCE X204-2 Product: SCALANCE X204-2FM Product: SCALANCE X204-2LD Product: SCALANCE X204-2LD TS Product: SCALANCE X204-2TS Product: SCALANCE X206-1 Product: SCALANCE X206-1LD Product: SCALANCE X208 Product: SCALANCE X208PRO Product: SCALANCE X212-2 Product: SCALANCE X212-2LD Product: SCALANCE X216 Product: SCALANCE X224 Product: SCALANCE X302-7 EEC (230V, coated) Product: SCALANCE X302-7 EEC (230V) Product: SCALANCE X302-7 EEC (24V, coated) Product: SCALANCE X302-7 EEC (24V) Product: SCALANCE X302-7 EEC (2x 230V, coated) Product: SCALANCE X302-7 EEC (2x 230V) Product: SCALANCE X302-7 EEC (2x 24V, coated) Product: SCALANCE X302-7 EEC (2x 24V) Product: SCALANCE X304-2FE Product: SCALANCE X306-1LD FE Product: SCALANCE X307-2 EEC (230V, coated) Product: SCALANCE X307-2 EEC (230V) Product: SCALANCE X307-2 EEC (24V, coated) Product: SCALANCE X307-2 EEC (24V) Product: SCALANCE X307-2 EEC (2x 230V, coated) Product: SCALANCE X307-2 EEC (2x 230V) +86 more

Summary

A vulnerability was identified in several SCALANCE X switches that could
allow an attacker to feed information into a network via the mirror port
with the monitor barrier feature enabled.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #5

    Added fix for SCALANCE X-200 switch family

  2. #4

    Errata: removed wrong fix release information for SCALANCE X-200 switch family; listed all affected SCALANCE products explicitly

  3. #3

    SIPLUS devices now explicitly mentioned in the list of affected products; added solution for SCALANCE X-300/X408

  4. #2

    Added solution for SCALANCE X-200

  5. #1

    Publication date

References