7.1

CVE-2020-15799

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Scalance X200-4pirt Firmware Version < 5.5.0
   Siemens ≫ Scalance X200-4pirt Version -
Siemens ≫ Scalance X201-3pirt Firmware Version < 5.5.0
   Siemens ≫ Scalance X201-3pirt Version -
Siemens ≫ Scalance X202-2irt Firmware Version < 5.5.0
   Siemens ≫ Scalance X202-2irt Version -
Siemens ≫ Scalance X202-2pirt Firmware Version < 5.5.0
   Siemens ≫ Scalance X202-2pirt Version -
Siemens ≫ Scalance X204irt Firmware Version < 5.5.0
   Siemens ≫ Scalance X204irt Version -
Siemens ≫ Scalance Xb205-3 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xb205-3 Version -
Siemens ≫ Scalance Xb205-3ld Firmware Version < 5.2.5
   Siemens ≫ Scalance Xb205-3ld Version -
Siemens ≫ Scalance Xb208 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xb208 Version -
Siemens ≫ Scalance Xb213-3 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xb213-3 Version -
Siemens ≫ Scalance Xb213-3ld Firmware Version < 5.2.5
   Siemens ≫ Scalance Xb213-3ld Version -
Siemens ≫ Scalance Xb216 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xb216 Version -
Siemens ≫ Scalance Xc206-2 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc206-2 Version -
Siemens ≫ Scalance Xc206-2sfp Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc206-2sfp Version -
Siemens ≫ Scalance Xc206-2sfp G Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc206-2sfp G Version -
Siemens ≫ Scalance Xc208 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc208 Version -
Siemens ≫ Scalance Xc208eec Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc208eec Version -
Siemens ≫ Scalance Xc208g Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc208g Version -
Siemens ≫ Scalance Xc208g Eec Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc208g Eec Version -
Siemens ≫ Scalance Xc208g Poe Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc208g Poe Version -
Siemens ≫ Scalance Xc216 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc216 Version -
Siemens ≫ Scalance Xc216-4c Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc216-4c Version -
Siemens ≫ Scalance Xc216-4c G Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc216-4c G Version -
Siemens ≫ Scalance Xc216eec Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc216eec Version -
Siemens ≫ Scalance Xc224-4c G Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc224-4c G Version -
Siemens ≫ Scalance Xc224 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xc224 Version -
Siemens ≫ Scalance Xf201-3p Irt Firmware Version < 5.2.5
   Siemens ≫ Scalance Xf201-3p Irt Version -
Siemens ≫ Scalance Xf202-2p Irt Firmware Version < 5.2.5
   Siemens ≫ Scalance Xf202-2p Irt Version -
Siemens ≫ Scalance Xf204 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xf204 Version -
Siemens ≫ Scalance Xf204-2 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xf204-2 Version -
Siemens ≫ Scalance Xf204 Dna Firmware Version < 5.2.5
   Siemens ≫ Scalance Xf204 Dna Version -
Siemens ≫ Scalance Xf204irt Firmware Version < 5.2.5
   Siemens ≫ Scalance Xf204irt Version -
Siemens ≫ Scalance Xf206-1 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xf206-1 Version -
Siemens ≫ Scalance Xf208 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xf208 Version -
Siemens ≫ Scalance Xp208 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xp208 Version -
Siemens ≫ Scalance Xp208 (eip) Firmware Version < 5.2.5
   Siemens ≫ Scalance Xp208 (eip) Version -
Siemens ≫ Scalance Xp208eec Firmware Version < 5.2.5
   Siemens ≫ Scalance Xp208eec Version -
Siemens ≫ Scalance Xp208poe Eec Firmware Version < 5.2.5
   Siemens ≫ Scalance Xp208poe Eec Version -
Siemens ≫ Scalance Xp216 Firmware Version < 5.2.5
   Siemens ≫ Scalance Xp216 Version -
Siemens ≫ Scalance Xp216 (eip) Firmware Version < 5.2.5
   Siemens ≫ Scalance Xp216 (eip) Version -
Siemens ≫ Scalance Xp216eec Firmware Version < 5.2.5
   Siemens ≫ Scalance Xp216eec Version -
Siemens ≫ Scalance Xp216poe Eec Firmware Version < 5.2.5
   Siemens ≫ Scalance Xp216poe Eec Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.08% 0.607
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NIST 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:N/I:N/A:C
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf
Vendor Advisory