CVE-2020-25226

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore.

• siemens scalance x200-4pirt firmware (< 5.5.0) • siemens scalance x201-3pirt firmware (< 5.5.0) • siemens scalance x202-2irt firmware (< 5.5.0) • siemens scalance x202-2pirt firmware (< 5.5.0) • siemens scalance x202-2pirt siplus net firmware (< 5.5.0) • siemens scalance x204irt firmware (< 5.5.0) • siemens scalance x307-3 firmware • siemens scalance x307-3ld firmware • siemens scalance x308-2 firmware • siemens scalance x308-2ld firmware • siemens scalance x308-2lh firmware • siemens scalance x308-2lh\+ firmware • siemens scalance x308-2m firmware • siemens scalance x308-2m ts firmware • siemens scalance x310 firmware • siemens scalance x310fe firmware • siemens scalance x320-1fe firmware • siemens scalance x320-3ldfe firmware • siemens scalance xb205-3 firmware (< 5.2.5) • siemens scalance xb205-3ld firmware (< 5.2.5) • siemens scalance xb208 firmware (< 5.2.5) • siemens scalance xb213-3 firmware (< 5.2.5) • siemens scalance xb213-3ld firmware (< 5.2.5) • siemens scalance xb216 firmware (< 5.2.5) • siemens scalance xc206-2 firmware (< 5.2.5) • siemens scalance xc206-2g poe firmware (< 5.2.5) • siemens scalance xc206-2g poe eec firmware (< 5.2.5) • siemens scalance xc206-2sfp firmware (< 5.2.5) • siemens scalance xc206-2sfp eec firmware (< 5.2.5) • siemens scalance xc206-2sfp g firmware (< 5.2.5) • siemens scalance xc206-2sfp g \(e\/ip\) firmware (< 5.2.5) • siemens scalance xc206-2sfp g eec firmware (< 5.2.5) • siemens scalance xc208 firmware (< 5.2.5) • siemens scalance xc208eec firmware (< 5.2.5) • siemens scalance xc208g firmware (< 5.2.5) • siemens scalance xc208g \(e\/ip\) firmware (< 5.2.5) • siemens scalance xc208g eec firmware (< 5.2.5) • siemens scalance xc208g poe firmware (< 5.2.5) • siemens scalance xc216 firmware (< 5.2.5) • siemens scalance xc216-4c firmware (< 5.2.5) • siemens scalance xc216-4c g firmware (< 5.2.5) • siemens scalance xc216-4c g \(e\/ip\) firmware (< 5.2.5) • siemens scalance xc216-4c g eec firmware (< 5.2.5) • siemens scalance xc216eec firmware (< 5.2.5) • siemens scalance xc224-4c g firmware (< 5.2.5) • siemens scalance xc224-4c g \(e\/ip\) firmware (< 5.2.5) • siemens scalance xc224-4c g eec firmware (< 5.2.5) • siemens scalance xc224 firmware (< 5.2.5) • siemens scalance xf201-3p irt firmware (< 5.2.5) • siemens scalance xf202-2p irt firmware (< 5.2.5) • siemens scalance xf204 firmware (< 5.2.5) • siemens scalance xf204-2 firmware (< 5.2.5) • siemens scalance xf204-2ba dna firmware (< 5.2.5) • siemens scalance xf204-2ba irt firmware (< 5.2.5) • siemens scalance xf204 dna firmware (< 5.2.5) • siemens scalance xf204irt firmware (< 5.2.5) • siemens scalance xf206-1 firmware (< 5.2.5) • siemens scalance xf208 firmware (< 5.2.5) • siemens scalance xp208 firmware (< 5.2.5) • siemens scalance xp208 \(eip\) firmware (< 5.2.5) … and 6 more