CVE:CVE-2019-13924
CNNVD:CNNVD-202002-448
Siemens Scalance X-200是德国西门子（Siemens）公司的一款工业级以太网交换机。
Siemens SCALANCE X-200 中存在输入验证错误漏洞，该漏洞源于设备在管理Web接口中所发送的响应头并不包含X-Frame-Option。攻击者可利用该漏洞劫持其他用户的点击操作。以下产品及版本受到影响：Siemens SCALANCE X-200 5.2.4之前版本、SCALANCE X-200IRT（全部版本）和SCALANCE X-300 4.1.3之前版本。
solution:Upgrade siemens scalance_xc-200_firmware to a higher version than 5.2.4,and avoid the version (,5.2.4); Upgrade siemens scalance_xf-200_firmware to a higher version than 5.2.4,and avoid the version (,5.2.4); Upgrade siemens scalance_xp-200_firmware to a higher version than 5.2.4,and avoid the version (,5.2.4); Upgrade siemens scalance_x-200irt_firmware to a higher version than *; Upgrade siemens scalance_xb-200_firmware to a higher version than 5.2.4,and avoid the version (,5.2.4); Upgrade siemens scalance_xr-300wg_firmware to a higher version than 4.1.3,and avoid the version (,4.1.3); Upgrade siemens scalance_x-300_firmware to a higher version than 4.1.3,and avoid the version (,4.1.3); Upgrade siemens scalance_xr-300_firmware to a higher version than 4.1.3,and avoid the version (,4.1.3)