CVE-2019-6569: Siemens Scalance X-200 Firmware

Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days.

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.

Affected products

• Siemens Scalance X-200 Firmware: before 5.2.4 (fixed in 5.2.4)
• Siemens Scalance X-300 Firmware: before 4.1.3 (fixed in 4.1.3)
• Siemens Scalance Xc-200 Firmware: before 4.1 (fixed in 4.1)
• Siemens Scalance Xf-200 Firmware: before 4.1 (fixed in 4.1)
• Siemens Scalance XP-200 Firmware: before 4.1 (fixed in 4.1)

Published 2019-03-26. Last modified 2026-06-17.