CVE-2023-29054

highpriority · track · 30EPSS 0.003 · 17 %ileDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.26% (17th) EPSS

CVSS 7.4 · high

Is it mine?

83 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SIPLUS NET SCALANCE X202-2P IRT (All versions < V5.5.2). The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X202-2IRT (6GK5202-2BB00-2BA3)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X202-2IRT (6GK5202-2BB10-2BA3)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X204IRT (6GK5204-0BA00-2BA3)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X204IRT (6GK5204-0BA10-2BA3)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE XF204IRT (6GK5204-0BA00-2BF2)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3)siemens_psirt
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X202-2IRT (6GK5202-2BB00-2BA3)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X202-2IRT (6GK5202-2BB10-2BA3)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X204IRT (6GK5204-0BA00-2BA3)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X204IRT (6GK5204-0BA10-2BA3)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSCALANCE XF204IRT (6GK5204-0BA00-2BF2)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
FixedSIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3)cisa_csaf_ot
Update to V5.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817790/
WorkaroundSCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X202-2IRT (6GK5202-2BB00-2BA3)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X202-2IRT (6GK5202-2BB10-2BA3)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X204IRT (6GK5204-0BA00-2BA3)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X204IRT (6GK5204-0BA10-2BA3)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE XF204IRT (6GK5204-0BA00-2BF2)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3)siemens_psirt
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X202-2IRT (6GK5202-2BB00-2BA3)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X202-2IRT (6GK5202-2BB10-2BA3)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X204IRT (6GK5204-0BA00-2BA3)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X204IRT (6GK5204-0BA10-2BA3)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSCALANCE XF204IRT (6GK5204-0BA00-2BF2)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only
WorkaroundSIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3)cisa_csaf_ot
Add only trusted SSH client public keys to ROS and allow access to those clients only

cvss

Technical severity, 0–10. One row per scoring source.

7.7

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.7–7.7

v3.17.4highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Nprimary · NVD / NIST USexploitability 2.2 · impact 5.2

v3.16.7mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H/E:P/RL:U/RC:Csecondary · CISA US

v3.17.7highAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.16.7mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H/E:P/RL:U/RC:Csecondary · ENISA EU

v3.16.7mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:Hsecondary · productcert@siemens.com DEexploitability 1.2 · impact 5.5

v3.16.7mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H/E:P/RL:U/RC:Csecondary · Siemens ProductCERT DE

v3.16.8mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-326USCWE-326USCWE-326USCWE-326US

affected products (83)

Products and version ranges known to be affected.

SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)all versionscisa_csaf_otUS
SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)all versionscisa_csaf_otUS
SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6)all versionscisa_csaf_otUS
SCALANCE X202-2IRT (6GK5202-2BB00-2BA3)all versionscisa_csaf_otUS
SCALANCE X202-2IRT (6GK5202-2BB10-2BA3)all versionscisa_csaf_otUS
SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)all versionscisa_csaf_otUS
SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)all versionscisa_csaf_otUS
SCALANCE X204IRT (6GK5204-0BA00-2BA3)all versionscisa_csaf_otUS
SCALANCE X204IRT (6GK5204-0BA10-2BA3)all versionscisa_csaf_otUS
SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)all versionscisa_csaf_otUS
SCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2)all versionscisa_csaf_otUS
SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)all versionscisa_csaf_otUS
SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)all versionscisa_csaf_otUS
SCALANCE XF204IRT (6GK5204-0BA00-2BF2)all versionscisa_csaf_otUS
SIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3)all versionscisa_csaf_otUS
Siemens SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)< V5.5.2cisa_csaf_otUS
Siemens SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)< V5.5.2cisa_csaf_otUS
Siemens SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6)< V5.5.2cisa_csaf_otUS
Siemens SCALANCE X202-2IRT (6GK5202-2BB00-2BA3)< V5.5.2cisa_csaf_otUS
Siemens SCALANCE X202-2IRT (6GK5202-2BB10-2BA3)< V5.5.2cisa_csaf_otUS

showing 20 of 83

advisories (2)

Vendor and ecosystem advisories describing this.

SSA-479249SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices2023-04-11csaf · siemens_psirtDE
The SSH server on SCALANCE X-200IRT devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. Siemens has released updates for the affected products and recommends to update to the latest versions.
ICSA-23-103-05Siemens SCALANCE X-200IRT Devices2023-04-11icsa · cisa_csaf_otUS
The SSH server on SCALANCE X-200IRT devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. Siemens has released updates for the affected products and recommends to update to the latest versions.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2023-04-11modified 2026-10-23

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan