CVE-2019-6569

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-440

Affected software

VendorProductVersions
SiemensSCALANCE X204-2All versions < V5.2.6
SiemensSCALANCE X204-2FMAll versions < V5.2.6
SiemensSCALANCE X204-2LDAll versions < V5.2.6
SiemensSCALANCE X204-2LD TSAll versions < V5.2.6
SiemensSCALANCE X204-2TSAll versions < V5.2.6
SiemensSCALANCE X206-1All versions < V5.2.6
SiemensSCALANCE X206-1LDAll versions < V5.2.6
SiemensSCALANCE X208All versions < V5.2.6
SiemensSCALANCE X208PROAll versions < V5.2.6
SiemensSCALANCE X212-2All versions < V5.2.6
SiemensSCALANCE X212-2LDAll versions < V5.2.6
SiemensSCALANCE X216All versions < V5.2.6
SiemensSCALANCE X224All versions < V5.2.6
SiemensSCALANCE X302-7 EEC (230V)All versions < V4.1.3
SiemensSCALANCE X302-7 EEC (230V, coated)All versions < V4.1.3
SiemensSCALANCE X302-7 EEC (24V)All versions < V4.1.3
SiemensSCALANCE X302-7 EEC (24V, coated)All versions < V4.1.3
SiemensSCALANCE X302-7 EEC (2x 230V)All versions < V4.1.3
SiemensSCALANCE X302-7 EEC (2x 230V, coated)All versions < V4.1.3
SiemensSCALANCE X302-7 EEC (2x 24V)All versions < V4.1.3
SiemensSCALANCE X302-7 EEC (2x 24V, coated)All versions < V4.1.3
SiemensSCALANCE X304-2FEAll versions < V4.1.3
SiemensSCALANCE X306-1LD FEAll versions < V4.1.3
SiemensSCALANCE X307-2 EEC (230V)All versions < V4.1.3
SiemensSCALANCE X307-2 EEC (230V, coated)All versions < V4.1.3
SiemensSCALANCE X307-2 EEC (24V)All versions < V4.1.3
SiemensSCALANCE X307-2 EEC (24V, coated)All versions < V4.1.3
SiemensSCALANCE X307-2 EEC (2x 230V)All versions < V4.1.3
SiemensSCALANCE X307-2 EEC (2x 230V, coated)All versions < V4.1.3
SiemensSCALANCE X307-2 EEC (2x 24V)All versions < V4.1.3
SiemensSCALANCE X307-2 EEC (2x 24V, coated)All versions < V4.1.3
SiemensSCALANCE X307-3All versions < V4.1.3
SiemensSCALANCE X307-3All versions < V4.1.3
SiemensSCALANCE X307-3LDAll versions < V4.1.3
SiemensSCALANCE X307-3LDAll versions < V4.1.3
SiemensSCALANCE X308-2All versions < V4.1.3
SiemensSCALANCE X308-2All versions < V4.1.3
SiemensSCALANCE X308-2LDAll versions < V4.1.3
SiemensSCALANCE X308-2LDAll versions < V4.1.3
SiemensSCALANCE X308-2LHAll versions < V4.1.3
SiemensSCALANCE X308-2LHAll versions < V4.1.3
SiemensSCALANCE X308-2LH+All versions < V4.1.3
SiemensSCALANCE X308-2LH+All versions < V4.1.3
SiemensSCALANCE X308-2MAll versions < V4.1.3
SiemensSCALANCE X308-2MAll versions < V4.1.3
SiemensSCALANCE X308-2M PoEAll versions < V4.1.3
SiemensSCALANCE X308-2M PoEAll versions < V4.1.3
SiemensSCALANCE X308-2M TSAll versions < V4.1.3
SiemensSCALANCE X308-2M TSAll versions < V4.1.3
SiemensSCALANCE X310All versions < V4.1.3

References

Timeline

Published
Mar 26, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-65708.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions,CVE-2019-65717.5A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS CVE-2019-65729.1A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor PaneCVE-2019-65747.5A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions CVE-2019-65757.5A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUSCVE-2019-65766.5A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor PaneCVE-2019-65775.4A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor PaneCVE-2019-65787.5A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions CVE-2019-65799.8A vulnerability has been identified in Spectrum Power 4 (with Web Office Portal). An attacker with network access to the web server on port CVE-2019-65809.8A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), SivCVE-2019-65818.8A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), SivCVE-2019-65827.1A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siv
CVE-2019-6569: Critical severity, CVSS 9.1 | Vulnix