Siemens SCALANCE X Products (Update B)
Several SCALANCE X switches contain vulnerabilities in the web server of the affected devices. An unauthenticated attacker could reboot, cause denial-of-service conditions and potentially impact the system by other means through heap and buffer overflow vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25226US | critical9.8 | — | ||
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)… | ||||
| CVE-2020-15800US | critical9.8 | — | ||
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)… | ||||
| CVE-2020-15799US | medium6.5OT elevated | — | ||
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)… | ||||
references
External citations — patches, advisories, analysis.
- SSA-139628: Vulnerabilities in Web Server for Scalance X Products - CSAF Versionself
- SSA-139628: Vulnerabilities in Web Server for Scalance X Products - PDF Versionself
- SSA-139628: Vulnerabilities in Web Server for Scalance X Products - TXT Versionself
- ICS Advisory ICSA-21-012-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-012-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (14)
- MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- MitigationSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- FixedSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)
Update to V4.1.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109773547/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan