Siemens SCALANCE X Switches (Update B)
Affected devices contain a vulnerability that allows an unauthenticated attacker
to violate access-control rules. The vulnerability can be triggered
by sending GET request to specific uniform resource locator on the
web configuration interface of the device. 

The security vulnerability could be exploited by an attacker with network
access to the affected systems. An attacker could use the vulnerability
to obtain sensitive information or change the device configuration.

At the time of advisory publication no public exploitation of this security
vulnerability was known.CVE-2019-13933 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L).