SSA-139628: Vulnerabilities in Web Server for Scalance X Products
Several SCALANCE X switches contain vulnerabilities in the web server of the affected devices. An unauthenticated attacker could reboot, cause denial-of-service conditions and potentially impact the system by other means through heap and buffer overflow vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-25226US | critical9.8 | — | ||
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)… | ||||
| CVE-2020-15800US | critical9.8 | — | ||
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)… | ||||
| CVE-2020-15799US | medium6.5OT erhöht | — | ||
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (14)
- MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- MitigationSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- MitigationSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- MitigationSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)
Limit network traffic of web servers of Scalance X switches to trusted connections by firewall rules (port 443/tcp).
- BehobenSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X-200 switch family (incl. SIPLUS NET variants)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)
Update to V4.1.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109773547/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan