Siemens Web Server of SCALANCE X200 (Update A)
Several SCALANCE X-200 switches contain buffer overflow vulnerabilities in the web server. In the most severe case an attacker could potentially remotely execute code. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-25669US | critical9.8 | — | ||
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SC… | ||||
| CVE-2021-25668US | critical9.8 | — | ||
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SC… | ||||
references
External citations — patches, advisories, analysis.
- SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200 - CSAF Versionself
- SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200 - PDF Versionself
- SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200 - TXT Versionself
- ICS Advisory ICSA-21-103-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-103-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (116)
- MitigationSCALANCE X200-4P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X200-4P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X201-3P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X201-3P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X201-3P IRT PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X201-3P IRT PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X202-2 IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X202-2 IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X202-2P IRT (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X202-2P IRT (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X202-2P IRT PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X202-2P IRT PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204 IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204 IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204 IRT PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204 IRT PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2FM
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2FM
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2LD (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2LD (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2LD TS
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2LD TS
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2TS
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2TS
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X206-1
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X206-1
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X206-1LD
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X206-1LD
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X208 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X208 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X208PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X208PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X212-2 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X212-2 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X212-2LD
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X212-2LD
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X216
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X216
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X224
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X224
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF201-3P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF201-3P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF202-2P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF202-2P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204 IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204 IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204-2 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204-2 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204-2BA IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204-2BA IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF206-1
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF206-1
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF208
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF208
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- FixedSCALANCE X200-4P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X200-4P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X201-3P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X201-3P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X201-3P IRT PRO
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X201-3P IRT PRO
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X202-2 IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X202-2 IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X202-2P IRT (incl. SIPLUS NET variant)
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X202-2P IRT (incl. SIPLUS NET variant)
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X202-2P IRT PRO
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X202-2P IRT PRO
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X204 IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X204 IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X204 IRT PRO
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X204 IRT PRO
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE X204-2 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2FM
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2FM
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2LD (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2LD (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2LD TS
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2LD TS
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2TS
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2TS
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X206-1
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X206-1
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X206-1LD
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X206-1LD
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X208 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X208 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X208PRO
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X208PRO
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X212-2 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X212-2 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X212-2LD
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X212-2LD
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X216
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X216
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X224
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X224
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE XF201-3P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE XF201-3P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE XF202-2P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE XF202-2P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE XF204
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE XF204
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE XF204 IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE XF204 IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE XF204-2 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE XF204-2 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE XF204-2BA IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE XF204-2BA IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - FixedSCALANCE XF206-1
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE XF206-1
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE XF208
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE XF208
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan