{"id":"CVE-2019-10927","aliases":["ALPINE-CVE-2019-10927","BELL-CVE-2019-10927","EUVD-2019-2641","GHSA-qwf6-8cjr-7638"],"status":"published","title":"A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE...","description":"A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01168,"percentile":0.676,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-703"],"published":"2019-08-13T18:55:57Z","modified":"2026-09-21T06:17:52Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"tiff","fixed_in":["4.0.10-r2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r2"}]}]}],"products":[{"vendor":"siemens","product":"scalance sc-600"},{"vendor":"siemens","product":"scalance xb-200"},{"vendor":"siemens","product":"scalance xc-200"},{"vendor":"siemens","product":"scalance xf-200ba"},{"vendor":"siemens","product":"scalance xp-200"},{"vendor":"siemens","product":"scalance xr-300wg"},{"vendor":"siemens","product":"scalance_xb-200_firmware"},{"vendor":"siemens","product":"scalance_xc-200_firmware"},{"vendor":"siemens","product":"scalance_xf-200ba_firmware"},{"vendor":"siemens","product":"scalance_xp-200_firmware"},{"vendor":"siemens","product":"scalance_xr-300wg_firmware"},{"vendor":"siemens ag","product":"scalance sc-600"},{"vendor":"siemens ag","product":"scalance xb-200"},{"vendor":"siemens ag","product":"scalance xc-200"},{"vendor":"siemens ag","product":"scalance xf-200ba"},{"vendor":"siemens ag","product":"scalance xp-200"},{"vendor":"siemens ag","product":"scalance xr-300wg"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10927"},{"url":"https://github.com/advisories/GHSA-qwf6-8cjr-7638"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-10927","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-10927","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-10927","description":"A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.","status":"published","published":"2019-08-13T18:55:57Z","modified":"2024-08-04T22:40:15.129Z","cwes":["CWE-703"],"updated_at":"2026-11-02T14:20:19.056416Z"}],"euvd":[{"id":"EUVD-2019-2641","description":"A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.","status":"published","published":"2019-08-13T18:55:57Z","modified":"2024-08-04T22:40:15Z","updated_at":"2026-11-03T02:40:50.763878Z"}],"ghsa":[{"id":"GHSA-qwf6-8cjr-7638","title":"A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE...","description":"A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.","status":"published","published":"2022-05-24T16:53:14Z","modified":"2023-01-28T05:07:03Z","updated_at":"2026-11-02T14:44:29.269512Z"}],"nvd":[{"id":"CVE-2019-10927","description":"A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.","status":"published","published":"2019-08-13T19:15:14.687Z","modified":"2026-06-17T02:11:55.527Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-703"],"updated_at":"2026-11-02T14:05:22.878504Z"}],"osv":[{"id":"ALPINE-CVE-2019-10927","description":"A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.","status":"published","published":"2019-08-13T19:15:14.687Z","modified":"2026-09-21T06:17:52.454773488Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"BELL-CVE-2019-10927","title":"CVE-2019-10927 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:17.455024Z","modified":"2026-09-06T07:15:14.172721165Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2019-10927","description":"A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.","status":"published","published":"2019-08-13T19:15:14.687Z","modified":"2026-03-14T09:33:13.74407Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:10.383287Z"}]}}