Description
The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SCALANCE X204-2 | All versions < V5.2.6 | — |
| Siemens | SCALANCE X204-2FM | All versions < V5.2.6 | — |
| Siemens | SCALANCE X204-2LD | All versions < V5.2.6 | — |
| Siemens | SCALANCE X204-2LD TS | All versions < V5.2.6 | — |
| Siemens | SCALANCE X204-2TS | All versions < V5.2.6 | — |
| Siemens | SCALANCE X206-1 | All versions < V5.2.6 | — |
| Siemens | SCALANCE X206-1LD | All versions < V5.2.6 | — |
| Siemens | SCALANCE X208 | All versions < V5.2.6 | — |
| Siemens | SCALANCE X208PRO | All versions < V5.2.6 | — |
| Siemens | SCALANCE X212-2 | All versions < V5.2.6 | — |
| Siemens | SCALANCE X212-2LD | All versions < V5.2.6 | — |
| Siemens | SCALANCE X216 | All versions < V5.2.6 | — |
| Siemens | SCALANCE X224 | All versions < V5.2.6 | — |
| Siemens | SCALANCE X302-7 EEC (230V) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X302-7 EEC (230V, coated) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X302-7 EEC (24V) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X302-7 EEC (24V, coated) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X302-7 EEC (2x 230V) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X302-7 EEC (2x 230V, coated) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X302-7 EEC (2x 24V) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X302-7 EEC (2x 24V, coated) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X304-2FE | All versions < V4.1.3 | — |
| Siemens | SCALANCE X306-1LD FE | All versions < V4.1.3 | — |
| Siemens | SCALANCE X307-2 EEC (230V) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X307-2 EEC (230V, coated) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X307-2 EEC (24V) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X307-2 EEC (24V, coated) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X307-2 EEC (2x 230V) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X307-2 EEC (2x 230V, coated) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X307-2 EEC (2x 24V) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X307-2 EEC (2x 24V, coated) | All versions < V4.1.3 | — |
| Siemens | SCALANCE X307-3 | All versions < V4.1.3 | — |
| Siemens | SCALANCE X307-3LD | All versions < V4.1.3 | — |
| Siemens | SCALANCE X308-2 | All versions < V4.1.3 | — |
| Siemens | SCALANCE X308-2LD | All versions < V4.1.3 | — |
| Siemens | SCALANCE X308-2LH | All versions < V4.1.3 | — |
| Siemens | SCALANCE X308-2LH+ | All versions < V4.1.3 | — |
| Siemens | SCALANCE X308-2M | All versions < V4.1.3 | — |
| Siemens | SCALANCE X308-2M PoE | All versions < V4.1.3 | — |
| Siemens | SCALANCE X308-2M TS | All versions < V4.1.3 | — |
| Siemens | SCALANCE X310 | All versions < V4.1.3 | — |
| Siemens | SCALANCE X310FE | All versions < V4.1.3 | — |
| Siemens | SCALANCE X320-1 FE | All versions < V4.1.3 | — |
| Siemens | SCALANCE X320-1-2LD FE | All versions < V4.1.3 | — |
| Siemens | SCALANCE X408-2 | All versions < V4.1.3 | — |
| Siemens | SCALANCE XB205-3 (SC) | All versions < V4.1 | — |
| Siemens | SCALANCE XB205-3 (ST/BFOC) | All versions < V4.1 | — |
| Siemens | SCALANCE XB205-3LD | All versions < V4.1 | — |
| Siemens | SCALANCE XB208 | All versions < V4.1 | — |
| Siemens | SCALANCE XB213-3 (SC) | All versions < V4.1 | — |
| Siemens | SCALANCE XB213-3 (ST/BFOC) | All versions < V4.1 | — |
| Siemens | SCALANCE XB213-3LD | All versions < V4.1 | — |
| Siemens | SCALANCE XB216 | All versions < V4.1 | — |
| Siemens | SCALANCE XC206-2 (SC) | All versions < V4.1 | — |
| Siemens | SCALANCE XC206-2 (ST/BFOC) | All versions < V4.1 | — |
| Siemens | SCALANCE XC206-2SFP | All versions < V4.1 | — |
| Siemens | SCALANCE XC206-2SFP EEC | All versions < V4.1 | — |
| Siemens | SCALANCE XC206-2SFP G | All versions < V4.1 | — |
| Siemens | SCALANCE XC206-2SFP G EEC | All versions < V4.1 | — |
| Siemens | SCALANCE XC208 | All versions < V4.1 | — |
| Siemens | SCALANCE XC208EEC | All versions < V4.1 | — |
| Siemens | SCALANCE XC208G | All versions < V4.1 | — |
| Siemens | SCALANCE XC208G EEC | All versions < V4.1 | — |
| Siemens | SCALANCE XC216 | All versions < V4.1 | — |
| Siemens | SCALANCE XC216-4C | All versions < V4.1 | — |
| Siemens | SCALANCE XC216-4C G | All versions < V4.1 | — |
| Siemens | SCALANCE XC216-4C G (EIP Def.) | All versions < V4.1 | — |
| Siemens | SCALANCE XC216-4C G EEC | All versions < V4.1 | — |
| Siemens | SCALANCE XC216EEC | All versions < V4.1 | — |
| Siemens | SCALANCE XC224 | All versions < V4.1 | — |
| Siemens | SCALANCE XC224-4C G | All versions < V4.1 | — |
| Siemens | SCALANCE XC224-4C G (EIP Def.) | All versions < V4.1 | — |
| Siemens | SCALANCE XC224-4C G EEC | All versions < V4.1 | — |
| Siemens | SCALANCE XF204 | All versions < V5.2.6, All versions < V4.1 | — |
| Siemens | SCALANCE XF204 DNA | All versions < V4.1 | — |
| Siemens | SCALANCE XF204-2 | All versions < V5.2.6 | — |
| Siemens | SCALANCE XF204-2BA | All versions < V4.1 | — |
| Siemens | SCALANCE XF204-2BA DNA | All versions < V4.1 | — |
| Siemens | SCALANCE XF206-1 | All versions < V5.2.6 | — |
| Siemens | SCALANCE XF208 | All versions < V5.2.6 | — |
| Siemens | SCALANCE XP208 | All versions < V4.1 | — |
| Siemens | SCALANCE XP208EEC | All versions < V4.1 | — |
| Siemens | SCALANCE XP208PoE EEC | All versions < V4.1 | — |
| Siemens | SCALANCE XP216 | All versions < V4.1 | — |
| Siemens | SCALANCE XP216EEC | All versions < V4.1 | — |
| Siemens | SCALANCE XP216POE EEC | All versions < V4.1 | — |
| Siemens | SCALANCE XR324-12M (230V, ports on front) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-12M (230V, ports on rear) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-12M (24V, ports on front) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-12M (24V, ports on rear) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-12M TS (24V) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-4M EEC (24V, ports on front) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-4M EEC (24V, ports on rear) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-4M EEC (2x 24V, ports on front) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-4M EEC (2x 24V, ports on rear) | All versions < V4.1.3 | — |
| Siemens | SCALANCE XR324-4M PoE (230V, ports on front) | All versions < V4.1.3 | — |
Advisories 2
- ICSA-19-085-01 Siemens SCALANCE X (Update D) CISA ICS & IT advisories · Jul 12, 2022
- SSA-557804 SSA-557804: Mirror Port Isolation Vulnerability in SCALANCE X Switches Siemens ProductCERT · Jul 12, 2022