CVE-2019-13925

2020-02-1115:36:10

CWE-400

siemens

www.cve.org

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

JSON

A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V4.1), SCALANCE S627-2M (All versions >= V3.0 and < V4.1). Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server.

CNA Affected

[
  {
    "product": "SCALANCE S602",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V3.0 and < V4.1"
      }
    ]
  },
  {
    "product": "SCALANCE S612",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V3.0 and < V4.1"
      }
    ]
  },
  {
    "product": "SCALANCE S623",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V3.0 and < V4.1"
      }
    ]
  },
  {
    "product": "SCALANCE S627-2M",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V3.0 and < V4.1"
      }
    ]
  }
]