CVEvulnerability

CVE-2020-15799

6.5 MEDIUM Published 2021-01-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-306

Description

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.

Affected configurations

• siemens scalance x200-4pirt firmware (< 5.5.0) • siemens scalance x201-3pirt firmware (< 5.5.0) • siemens scalance x202-2irt firmware (< 5.5.0) • siemens scalance x202-2pirt firmware (< 5.5.0) • siemens scalance x202-2pirt siplus net firmware (< 5.5.0) • siemens scalance x204irt firmware (< 5.5.0) • siemens scalance x307-3 firmware • siemens scalance x307-3ld firmware • siemens scalance x308-2 firmware • siemens scalance x308-2ld firmware • siemens scalance x308-2lh firmware • siemens scalance x308-2lh\+ firmware • siemens scalance x308-2m firmware • siemens scalance x308-2m ts firmware • siemens scalance x310 firmware • siemens scalance x310fe firmware • siemens scalance x320-1fe firmware • siemens scalance x320-3ldfe firmware • siemens scalance xb205-3 firmware (< 5.2.5) • siemens scalance xb205-3ld firmware (< 5.2.5) • siemens scalance xb208 firmware (< 5.2.5) • siemens scalance xb213-3 firmware (< 5.2.5) • siemens scalance xb213-3ld firmware (< 5.2.5) • siemens scalance xb216 firmware (< 5.2.5) • siemens scalance xc206-2 firmware (< 5.2.5) • siemens scalance xc206-2g poe firmware (< 5.2.5) • siemens scalance xc206-2g poe eec firmware (< 5.2.5) • siemens scalance xc206-2sfp firmware (< 5.2.5) • siemens scalance xc206-2sfp eec firmware (< 5.2.5) • siemens scalance xc206-2sfp g firmware (< 5.2.5) • siemens scalance xc206-2sfp g \(e\/ip\) firmware (< 5.2.5) • siemens scalance xc206-2sfp g eec firmware (< 5.2.5) • siemens scalance xc208 firmware (< 5.2.5) • siemens scalance xc208eec firmware (< 5.2.5) • siemens scalance xc208g firmware (< 5.2.5) • siemens scalance xc208g \(e\/ip\) firmware (< 5.2.5) • siemens scalance xc208g eec firmware (< 5.2.5) • siemens scalance xc208g poe firmware (< 5.2.5) • siemens scalance xc216 firmware (< 5.2.5) • siemens scalance xc216-4c firmware (< 5.2.5) • siemens scalance xc216-4c g firmware (< 5.2.5) • siemens scalance xc216-4c g \(e\/ip\) firmware (< 5.2.5) • siemens scalance xc216-4c g eec firmware (< 5.2.5) • siemens scalance xc216eec firmware (< 5.2.5) • siemens scalance xc224-4c g firmware (< 5.2.5) • siemens scalance xc224-4c g \(e\/ip\) firmware (< 5.2.5) • siemens scalance xc224-4c g eec firmware (< 5.2.5) • siemens scalance xc224 firmware (< 5.2.5) • siemens scalance xf201-3p irt firmware (< 5.2.5) • siemens scalance xf202-2p irt firmware (< 5.2.5) • siemens scalance xf204 firmware (< 5.2.5) • siemens scalance xf204-2 firmware (< 5.2.5) • siemens scalance xf204-2ba dna firmware (< 5.2.5) • siemens scalance xf204-2ba irt firmware (< 5.2.5) • siemens scalance xf204 dna firmware (< 5.2.5) • siemens scalance xf204irt firmware (< 5.2.5) • siemens scalance xf206-1 firmware (< 5.2.5) • siemens scalance xf208 firmware (< 5.2.5) • siemens scalance xp208 firmware (< 5.2.5) • siemens scalance xp208 \(eip\) firmware (< 5.2.5) … and 6 more

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References