CVE-2019-10942

State
Published
Severity
Not scored
Published
Aug 13, 2019
Updated
Aug 4, 2024
Reserved
Apr 8, 2019

Read the record on cve.org

Description

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X204RNA (HSR) (All versions), SCALANCE X204RNA (PRP) (All versions), SCALANCE X204RNA EEC (HSR) (All versions), SCALANCE X204RNA EEC (PRP) (All versions), SCALANCE X204RNA EEC (PRP/HSR) (All versions). The device contains a vulnerability that could allow an attacker to trigger a denial-of-service condition by sending large message packages repeatedly to the telnet service. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
SCALANCE X-200 switch family (incl. SIPLUS NET variants)Siemens
  • All versions < V5.2.5Affected
SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)Siemens
  • All versions < V5.5.0Affected
SCALANCE X204RNA (HSR)Siemens
  • All versionsAffected
SCALANCE X204RNA (PRP)Siemens
  • All versionsAffected
SCALANCE X204RNA EEC (HSR)Siemens
  • All versionsAffected
SCALANCE X204RNA EEC (PRP)Siemens
  • All versionsAffected
SCALANCE X204RNA EEC (PRP/HSR)Siemens
  • All versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.