Detections
Analytics
Siemens (CVE-2019-6585)
medium Tenable OT Security Plugin ID 500899
Synopsis
The remote OT asset is affected by a vulnerability.Description
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V4.1), SCALANCE S627-2M (All versions >= V3.0 and < V4.1). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link.User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed.
This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
https://cert-portal.siemens.com/productcert/pdf/ssa-591405.pdf
Plugin Details
Severity: Medium
ID: 500899
File Name: tenable_ot_siemens_CVE-2019-6585.nasl
Version: 1.7
Type: Remote
Family: Tenable.ot
Published: 3/27/2023
Updated: 6/19/2026
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Low
Score: 3.0
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS Score Source: CVE-2019-6585
CVSS v3
Risk Factor: Medium
Base Score: 6.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Vulnerability Information
CPE: cpe:/o:siemens:scalance_s627-2m_firmware, cpe:/o:siemens:scalance_s602_firmware, cpe:/o:siemens:scalance_s623_firmware, cpe:/o:siemens:scalance_s612_firmware
Required KB Items: Tenable.ot/Siemens
Exploit Ease: No known exploits are available
Patch Publication Date: 3/10/2020
Vulnerability Publication Date: 3/10/2020
Reference Information
CVE: CVE-2019-6585