Siemens SCALANCE SC-600 2.0 SSH Service command injection

Summaryinfo

A vulnerability categorized as critical has been discovered in Siemens SCALANCE SC-600 2.0. Impacted is an unknown function of the component SSH Service. The manipulation results in command injection. This vulnerability is known as CVE-2019-10928. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability, which was classified as critical, was found in Siemens SCALANCE SC-600 2.0. Affected is an unknown functionality of the component SSH Service. The manipulation with an unknown input leads to a command injection vulnerability. CWE is classifying the issue as CWE-77. The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

A vulnerability has been identified in SCALANCE SC-600 (V2.0). An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the device to allow execution of arbitrary commands. The security vulnerability could be exploited by an authenticated attacker with physical access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the confidentiality, integrity and availability of the affected device.

The weakness was published 08/13/2019 (Website). The advisory is shared for download at cert-portal.siemens.com. This vulnerability is traded as CVE-2019-10928 since 04/08/2019. It is possible to launch the attack remotely. The successful exploitation needs a authentication. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $5k-$25k (estimation calculated on 11/25/2023). The MITRE ATT&CK project declares the attack technique as T1202.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Similar entry is available at VDB-139979. Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Siemens

Name

• SCALANCE SC-600

Version

• 2.0

License

• commercial

Website

• Vendor: https://www.siemens.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion