High SSA-591405 3 CVEs

SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family

Published Feb 11, 2020 · Updated Apr 13, 2021 · Revision 3

Vendor: Siemens Product: SCALANCE S602 Product: SCALANCE S612 Product: SCALANCE S623 Product: SCALANCE S627-2M

Summary

The firmware for SCALANCE S-600 family devices contains multiple web vulnerabilities. The vulnerabilities could allow an remote attacker to conduct Denial-of-Service attacks or perform Cross-Site Scripting attacks.

Siemens has released updates for the affected products and recommends to update to the latest versions, or to upgrade to a successor product.

Vulnerabilities 3

Unscored —

CVE-2019-13925

A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= …

Siemens SCALANCE S602 SCALANCE S623 SCALANCE S612 ICS / OT

Feb 11, 2020
Unscored —

CVE-2019-13926

A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= …

Siemens SCALANCE S612 SCALANCE S627-2M SCALANCE S602 ICS / OT

Feb 11, 2020
Unscored —

CVE-2019-6585

A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= …

Siemens SCALANCE S602 SCALANCE S623 SCALANCE S612 ICS / OT

Mar 10, 2020

Revision history

2021-04-13 #3
Added solution for SCALANCE S602, SCALANCE S612, SCALANCE S623, and SCALANCE S627-2M
2020-08-11 #2
Informed about successor products for the SCALANCE S-600 family
2020-02-11 #1
Publication Date

References

SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-591405.pdf
SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-591405.txt