Siemens Scalance X-200 Password Storage credentials management

Summaryinfo

A vulnerability, which was classified as critical, has been found in Siemens Scalance X-200, SCALANCE X-200IRT, SCALANCE X-300 and SCALANCE X-414-3E. This impacts an unknown function of the component Password Storage. Performing a manipulation results in credentials management. This vulnerability is identified as CVE-2019-6567. The attack is only possible with local access. There is not any exploit available.

Detailsinfo

A vulnerability classified as critical has been found in Siemens Scalance X-200, SCALANCE X-200IRT, SCALANCE X-300 and SCALANCE X-414-3E (affected version unknown). This affects an unknown functionality of the component Password Storage. The manipulation with an unknown input leads to a credentials management vulnerability. CWE is classifying the issue as CWE-255. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A vulnerability has been identified in SCALANCE X-200 (All Versions < V5.2.4), SCALANCE X-200IRT (All versions), SCALANCE X-300 (All versions), SCALANCE X-414-3E (All versions). The affected devices store passwords in a recoverable format. An attacker may extract and recover device passwords from the device configuration. Successful exploitation requires access to a device configuration backup and impacts confidentiality of the stored passwords. At the time of advisory publication no public exploitation of this security vulnerability was known.

The weakness was released 06/12/2019. This vulnerability is uniquely identified as CVE-2019-6567 since 01/22/2019. The exploitability is told to be easy. Attacking locally is a requirement. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 10/05/2023). The attack technique deployed by this issue is T1552 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Siemens

Name

• Scalance X-200
• SCALANCE X-200IRT
• SCALANCE X-300
• SCALANCE X-414-3E

License

• commercial

Website

• Vendor: https://www.siemens.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion