medium6.1
CVE-2019-6585
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All ver…
Impact
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V4.1), SCALANCE S627-2M (All versions >= V3.0 and < V4.1). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Scalance S602 Firmware | from 3.0 before 4.1 |
| Siemens | Scalance S612 Firmware | from 3.0 before 4.1 |
| Siemens | Scalance S623 Firmware | from 3.0 before 4.1 |
| Siemens | Scalance S627-2m Firmware | from 3.0 before 4.1 |