CVEvulnerability
CVE-2020-15799
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-01-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-306
Description
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.
Affected configurations
• siemens scalance x200-4pirt firmware (< 5.5.0)
• siemens scalance x201-3pirt firmware (< 5.5.0)
• siemens scalance x202-2irt firmware (< 5.5.0)
• siemens scalance x202-2pirt firmware (< 5.5.0)
• siemens scalance x202-2pirt siplus net firmware (< 5.5.0)
• siemens scalance x204irt firmware (< 5.5.0)
• siemens scalance x307-3 firmware
• siemens scalance x307-3ld firmware
• siemens scalance x308-2 firmware
• siemens scalance x308-2ld firmware
• siemens scalance x308-2lh firmware
• siemens scalance x308-2lh\+ firmware
• siemens scalance x308-2m firmware
• siemens scalance x308-2m ts firmware
• siemens scalance x310 firmware
• siemens scalance x310fe firmware
• siemens scalance x320-1fe firmware
• siemens scalance x320-3ldfe firmware
• siemens scalance xb205-3 firmware (< 5.2.5)
• siemens scalance xb205-3ld firmware (< 5.2.5)
• siemens scalance xb208 firmware (< 5.2.5)
• siemens scalance xb213-3 firmware (< 5.2.5)
• siemens scalance xb213-3ld firmware (< 5.2.5)
• siemens scalance xb216 firmware (< 5.2.5)
• siemens scalance xc206-2 firmware (< 5.2.5)
• siemens scalance xc206-2g poe firmware (< 5.2.5)
• siemens scalance xc206-2g poe eec firmware (< 5.2.5)
• siemens scalance xc206-2sfp firmware (< 5.2.5)
• siemens scalance xc206-2sfp eec firmware (< 5.2.5)
• siemens scalance xc206-2sfp g firmware (< 5.2.5)
• siemens scalance xc206-2sfp g \(e\/ip\) firmware (< 5.2.5)
• siemens scalance xc206-2sfp g eec firmware (< 5.2.5)
• siemens scalance xc208 firmware (< 5.2.5)
• siemens scalance xc208eec firmware (< 5.2.5)
• siemens scalance xc208g firmware (< 5.2.5)
• siemens scalance xc208g \(e\/ip\) firmware (< 5.2.5)
• siemens scalance xc208g eec firmware (< 5.2.5)
• siemens scalance xc208g poe firmware (< 5.2.5)
• siemens scalance xc216 firmware (< 5.2.5)
• siemens scalance xc216-4c firmware (< 5.2.5)
• siemens scalance xc216-4c g firmware (< 5.2.5)
• siemens scalance xc216-4c g \(e\/ip\) firmware (< 5.2.5)
• siemens scalance xc216-4c g eec firmware (< 5.2.5)
• siemens scalance xc216eec firmware (< 5.2.5)
• siemens scalance xc224-4c g firmware (< 5.2.5)
• siemens scalance xc224-4c g \(e\/ip\) firmware (< 5.2.5)
• siemens scalance xc224-4c g eec firmware (< 5.2.5)
• siemens scalance xc224 firmware (< 5.2.5)
• siemens scalance xf201-3p irt firmware (< 5.2.5)
• siemens scalance xf202-2p irt firmware (< 5.2.5)
• siemens scalance xf204 firmware (< 5.2.5)
• siemens scalance xf204-2 firmware (< 5.2.5)
• siemens scalance xf204-2ba dna firmware (< 5.2.5)
• siemens scalance xf204-2ba irt firmware (< 5.2.5)
• siemens scalance xf204 dna firmware (< 5.2.5)
• siemens scalance xf204irt firmware (< 5.2.5)
• siemens scalance xf206-1 firmware (< 5.2.5)
• siemens scalance xf208 firmware (< 5.2.5)
• siemens scalance xp208 firmware (< 5.2.5)
• siemens scalance xp208 \(eip\) firmware (< 5.2.5)
… and 6 more
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf Vendor Advisory