CVE-2020-15800
Critical
Description
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSiemens Scalance X200-4pirt Firmware
PublishedJan 12, 2021
First seenJan 12, 2021
Weakness typeCWE-122CWE-122
How to fix
Update
- siemens scalance_x200-4pirt_firmware5.5.0 or later
- siemens scalance_x201-3pirt_firmware5.5.0 or later
- siemens scalance_x202-2irt_firmware5.5.0 or later
- siemens scalance_x202-2pirt_firmware5.5.0 or later
- siemens scalance_x202-2pirt_siplus_net_firmware5.5.0 or later
- siemens scalance_x204irt_firmware5.5.0 or later
- siemens scalance_xb205-3_firmware5.2.5 or later
- siemens scalance_xb205-3ld_firmware5.2.5 or later
- siemens scalance_xb208_firmware5.2.5 or later
- siemens scalance_xb213-3_firmware5.2.5 or later
- siemens scalance_xb213-3ld_firmware5.2.5 or later
- siemens scalance_xb216_firmware5.2.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens scalance_x200-4pirt_firmware | v < 5.5.0 | 5.5.0 |
| siemens scalance_x201-3pirt_firmware | v < 5.5.0 | 5.5.0 |
| siemens scalance_x202-2irt_firmware | v < 5.5.0 | 5.5.0 |
| siemens scalance_x202-2pirt_firmware | v < 5.5.0 | 5.5.0 |
| siemens scalance_x202-2pirt_siplus_net_firmware | v < 5.5.0 | 5.5.0 |
| siemens scalance_x204irt_firmware | v < 5.5.0 | 5.5.0 |
| siemens scalance_x307-3_firmware | No range specified | — |
| siemens scalance_x307-3ld_firmware | No range specified | — |
| siemens scalance_x308-2_firmware | No range specified | — |
| siemens scalance_x308-2ld_firmware | No range specified | — |
| siemens scalance_x308-2lh_firmware | No range specified | — |
| siemens scalance_x308-2lh\+_firmware | No range specified | — |
| siemens scalance_x308-2m_firmware | No range specified | — |
| siemens scalance_x308-2m_ts_firmware | No range specified | — |
| siemens scalance_x310_firmware | No range specified | — |
| siemens scalance_x310fe_firmware | No range specified | — |
| siemens scalance_x320-1fe_firmware | No range specified | — |
| siemens scalance_x320-3ldfe_firmware | No range specified | — |
| siemens scalance_xb205-3_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xb205-3ld_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xb208_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xb213-3_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xb213-3ld_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xb216_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc206-2_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc206-2g_poe__firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc206-2g_poe_eec_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc206-2sfp_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc206-2sfp_eec_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc206-2sfp_g_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc206-2sfp_g_\(e\/ip\)_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc206-2sfp_g_eec_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc208_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc208eec_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc208g_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc208g_\(e\/ip\)_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc208g_eec_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc208g_poe_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc216_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc216-4c_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc216-4c_g_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc216-4c_g_\(e\/ip\)_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc216-4c_g_eec_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc216eec_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc224-4c_g__firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc224-4c_g_\(e\/ip\)_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc224-4c_g_eec_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xc224__firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xf201-3p_irt_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xf202-2p_irt_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xf204_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xf204-2_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xf204-2ba_dna_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xf204-2ba_irt_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xf204_dna_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xf204irt_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xf206-1_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xf208_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xp208_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xp208_\(eip\)_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xp208eec_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xp208poe_eec_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xp216_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xp216_\(eip\)_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xp216eec_firmware | v < 5.2.5 | 5.2.5 |
| siemens scalance_xp216poe_eec_firmware | v < 5.2.5 | 5.2.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.