CVE-2019-13925

HIGH

SCALANCE S602/S612/S623/S627-2M Firmware 3.0-4.1 - Denial of Service via Crafted Packets to Port 443

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V4.1), SCALANCE S627-2M (All versions >= V3.0 and < V4.1). Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server.

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://www.us-cert.gov/ics/advisories/icsa-20-042-10

Scores

CVSS v3 7.5
EPSS 0.0017
EPSS Percentile 37.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-400
Status published
Products (4)
siemens/scalance_s602_firmware 3.0 - 4.1
siemens/scalance_s612_firmware 3.0 - 4.1
siemens/scalance_s623_firmware 3.0 - 4.1
siemens/scalance_s627-2m_firmware 3.0 - 4.1
Published Feb 11, 2020
Tracked Since Feb 18, 2026