Siemens SCALANCE X Switches (Update B)
The device does not send the X-Frame-Option Header in the administrative web
interface, which makes it vulnerable to Clickjacking attacks. 

The security vulnerability could be exploited by an attacker that is able
to trick an administrative user with a valid session on the target device into
clicking on a website controlled by the attacker. The vulnerability could
allow an attacker to perform administrative actions via the web interface.
CVE-2019-13924 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L).