Strix
26.1K

CVE-2019-6569

CRITICALCVSS 9.1/10EPSS 1.33%

Last modified

CVE-2019-6569 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.. EPSS estimates a 1.33% chance of exploitation in the next 30 days.

Description

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.

Metrics

CVSS 3.1
9.1/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS Probability
1.33%

67.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
SiemensScalance X-200 Firmware< 5.2.4
SiemensScalance X-300 Firmware< 4.1.3
SiemensScalance Xp-200 Firmware< 4.1
SiemensScalance Xc-200 Firmware< 4.1
SiemensScalance Xf-200 Firmware< 4.1

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-6569?
The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.
How severe is CVE-2019-6569?
CVE-2019-6569 has a CVSS score of 9.1/10 (CRITICAL severity). The EPSS model estimates a 1.33% probability of exploitation in the next 30 days.
How do I fix CVE-2019-6569?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-6569?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST