CVE-2019-13933
Estado: ModificadaAlta (8.6)—
A vulnerability has been identified in SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2.
Leer descripción completaMostrar menos
Affected devices contain a vulnerability that allows an unauthenticated attacker to violate access-control rules. The vulnerability can be triggered by sending GET request to specific uniform resource locator on the web configuration interface of the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. An attacker could use the vulnerability to obtain sensitive information or change the device configuration. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
- Puntuación base: 8.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.39%
- Percentil entre todas las CVEs puntuadas: 71
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (7)
CWE
- CWE-306
- CWE-306
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-13933",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.6,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 4.7,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "productcert@siemens.com",
"affectedData": [
{
"vendor": "Siemens",
"product": "SCALANCE X204RNA (HSR)",
"versions": [
{
"status": "affected",
"version": "All versions < V3.2.7"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X204RNA (PRP)",
"versions": [
{
"status": "affected",
"version": "All versions < V3.2.7"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X204RNA EEC (HSR)",
"versions": [
{
"status": "affected",
"version": "All versions < V3.2.7"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X204RNA EEC (PRP)",
"versions": [
{
"status": "affected",
"version": "All versions < V3.2.7"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X204RNA EEC (PRP/HSR)",
"versions": [
{
"status": "affected",
"version": "All versions < V3.2.7"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X302-7 EEC (230V)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X302-7 EEC (230V, coated)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X302-7 EEC (24V)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X302-7 EEC (24V, coated)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X302-7 EEC (2x 230V)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X302-7 EEC (2x 230V, coated)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X302-7 EEC (2x 24V)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X302-7 EEC (2x 24V, coated)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X304-2FE",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X306-1LD FE",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X307-2 EEC (230V)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X307-2 EEC (230V, coated)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X307-2 EEC (24V)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X307-2 EEC (24V, coated)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X307-2 EEC (2x 230V)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X307-2 EEC (2x 230V, coated)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X307-2 EEC (2x 24V)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X307-2 EEC (2x 24V, coated)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X307-3",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X307-3",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X307-3LD",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X307-3LD",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2LD",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2LD",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2LH",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2LH",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2LH+",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2LH+",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2M",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2M",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2M PoE",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2M PoE",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2M TS",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X308-2M TS",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X310",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X310",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X310FE",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X310FE",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X320-1 FE",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X320-1-2LD FE",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X408-2",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-12M (230V, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-12M (230V, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-12M (230V, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-12M (230V, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-12M (24V, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-12M (24V, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-12M (24V, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-12M (24V, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-12M TS (24V)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-12M TS (24V)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (24V, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (24V, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M PoE (230V, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M PoE (24V, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
},
{
"vendor": "Siemens",
"product": "SIPLUS NET SCALANCE X308-2",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.3"
}
]
}
]
}
],
"published": "2020-01-16T16:15:16.187",
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-443566.pdf",
"tags": [
"Vendor Advisory"
],
"source": "productcert@siemens.com"
},
{
"url": "https://www.us-cert.gov/ics/advisories/icsa-20-014-03",
"tags": [
"Third Party Advisory"
],
"source": "productcert@siemens.com"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-443566.pdf",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.us-cert.gov/ics/advisories/icsa-20-014-03",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "productcert@siemens.com",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices contain a vulnerability that allows an unauthenticated attacker to violate access-control rules. The vulnerability can be triggered by sending GET request to specific uniform resource locator on the web configuration interface of the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. An attacker could use the vulnerability to obtain sensitive information or change the device configuration. At the time of advisory publication no public exploitation of this security vulnerability was known."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en la familia de conmutadores SCALANCE X-300 (incl. X408 y variantes SIPLUS NET), SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, revestido), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, revestido), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, revestido), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, revestido), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, revestido), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, revestido), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, revestido), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, revestido), SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, puertos en la parte delantera), SCALANCE XR324-12M (230V, puertos en la parte delantera), SCALANCE XR324-12M (230V, puertos en la parte trasera), SCALANCE XR324-12M (230V, puertos en la parte trasera), SCALANCE XR324-12M (24V, puertos en la parte delantera), SCALANCE XR324-12M (24V, puertos en la parte delantera), SCALANCE XR324-12M (24V, puertos en la parte trasera), SCALANCE XR324-12M (24V, puertos en la parte trasera), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, puertos en la parte delantera), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, puertos en la parte delantera), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, puertos en la parte trasera), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, puertos en la parte trasera), SCALANCE XR324-4M EEC (24V, puertos en la parte delantera), SCALANCE XR324-4M EEC (24V, puertos en la parte delantera), SCALANCE XR324-4M EEC (24V, puertos en la parte trasera), SCALANCE XR324-4M EEC (24V, puertos en la parte trasera), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, puertos en la parte delantera), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, puertos en la parte delantera), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, puertos en la parte trasera), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, puertos en la parte trasera), SCALANCE XR324-4M EEC (2x 24V, puertos en la parte delantera), SCALANCE XR324-4M EEC (2x 24V, puertos en la parte delantera), SCALANCE XR324-4M EEC (2x 24V, puertos en la parte trasera), SCALANCE XR324-4M EEC (2x 24V, puertos en la parte trasera), SCALANCE XR324-4M PoE (230V, puertos en la parte delantera), SCALANCE XR324-4M PoE (230V, puertos en la parte trasera), SCALANCE XR324-4M PoE (24V, puertos en la parte delantera), SCALANCE XR324-4M PoE (24V, puertos en la parte trasera), SCALANCE XR324-4M PoE TS (24V, puertos en la parte delantera), SIPLUS NET SCALANCE X308-2. Los dispositivos afectados contienen una vulnerabilidad que permite a un atacante no autentificado violar las reglas de control de acceso. La vulnerabilidad puede activarse enviando una solicitud GET a un localizador de recursos uniforme específico en la interfaz de configuración web del dispositivo. La vulnerabilidad de seguridad podría ser explotada por un atacante con acceso de red a los sistemas afectados. Un atacante podría utilizar la vulnerabilidad para obtener información sensible o cambiar la configuración del dispositivo. En el momento de la publicación del aviso no se conocía ninguna explotación pública de esta vulnerabilidad de seguridad"
}
],
"lastModified": "2026-06-17T02:17:26.490",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:scalance_x-200rna_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "282096F4-8422-4261-A446-69FFB0933FC1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:scalance_x-200rna:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4BCF5B82-0766-4711-90E6-C2A6FACE44EE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:scalance_x204rna_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C435EFA-6C21-41EA-9A3F-136FF7F03776"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:scalance_x204rna:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EA8B483F-0FD2-49F8-A86A-672A6E007949"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:scalance_x-300_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "076F3DDE-2B70-4F53-9B12-7CE3D9641E7E",
"versionEndExcluding": "4.1.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:scalance_x-300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B2D0AB50-6F0B-4232-8C8E-1647410D362D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02B398C3-3EDD-4FD4-977A-8461DB27CC49",
"versionEndExcluding": "4.1.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "434BC9BE-C5DB-4DAF-8E07-DFE4EEA0D7FE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:scalance_xr-300_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "129E733C-0BF1-4DF0-9772-66009BA3C64D",
"versionEndExcluding": "4.1.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:scalance_xr-300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "889CF2C0-EE6C-447F-85F1-005730EAD232"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B1BAB4A-4F21-4BD7-B474-7675CEF22008",
"versionEndExcluding": "4.1.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0C632B90-EB11-4A4C-8128-DABBE044B9AF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:siplus_net_csm_1277_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAAC05E1-5FED-4072-906B-9B1289A1E6ED",
"versionEndExcluding": "4.1.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:siplus_net_csm_1277:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "54C4F62C-EF24-434F-800C-07F26968EFBA"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "productcert@siemens.com"
}