SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices
The SSH server on SCALANCE X-200IRT devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-29054US | high7.4 | — | ||
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2),… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices - CSAF Versionself
- SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices - HTML Versionself
- SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices - PDF Versionself
- SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices - TXT Versionself
Behebungen (30)
- BehobenSCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE X202-2IRT (6GK5202-2BB00-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE X202-2IRT (6GK5202-2BB10-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE X204IRT (6GK5204-0BA00-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE X204IRT (6GK5204-0BA10-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSCALANCE XF204IRT (6GK5204-0BA00-2BF2)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - BehobenSIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3)
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/ - WorkaroundSCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X202-2IRT (6GK5202-2BB00-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X202-2IRT (6GK5202-2BB10-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X204IRT (6GK5204-0BA00-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X204IRT (6GK5204-0BA10-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSCALANCE XF204IRT (6GK5204-0BA00-2BF2)
Add only trusted SSH client public keys to ROS and allow access to those clients only
- WorkaroundSIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3)
Add only trusted SSH client public keys to ROS and allow access to those clients only
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan