SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices
The SSH server on SCALANCE X-200IRT devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-29054US | high7.4 | — | ||
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2),… | ||||
references
External citations — patches, advisories, analysis.
- SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices - CSAF Versionself
- SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices - HTML Versionself
- SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices - PDF Versionself
- SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices - TXT Versionself
remediations (30)
- FixedSCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE X202-2IRT (6GK5202-2BB00-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE X202-2IRT (6GK5202-2BB10-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE X204IRT (6GK5204-0BA00-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE X204IRT (6GK5204-0BA10-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSCALANCE XF204IRT (6GK5204-0BA00-2BF2)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - FixedSIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - WorkaroundSCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X202-2IRT (6GK5202-2BB00-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X202-2IRT (6GK5202-2BB10-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X204IRT (6GK5204-0BA00-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X204IRT (6GK5204-0BA10-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE XF204IRT (6GK5204-0BA00-2BF2)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan