CVE-2019-6567

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X-414-3E (All versions). The affected devices store passwords in a recoverable format. An attacker may extract and recover device passwords from the device configuration. Successful exploitation requires access to a device configuration backup and impacts confidentiality of the stored passwords.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-257CWE-522

Affected software

VendorProductVersions
SiemensSCALANCE X-200 switch family (incl. SIPLUS NET variants)All Versions < V5.2.4
SiemensSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)All versions < V5.5.0
SiemensSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)All versions < V4.1.3
SiemensSCALANCE X-414-3EAll versions

References

Timeline

Published
Jun 12, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-65687.5The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a deniCVE-2019-65699.1The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network.CVE-2019-65708.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions,CVE-2019-65717.5A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS CVE-2019-65729.1A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor PaneCVE-2019-65747.5A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions CVE-2019-65757.5A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUSCVE-2019-65766.5A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor PaneCVE-2019-65775.4A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor PaneCVE-2019-65787.5A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions CVE-2019-65799.8A vulnerability has been identified in Spectrum Power 4 (with Web Office Portal). An attacker with network access to the web server on port CVE-2019-65809.8A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siv