CVE-2020-28391

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.

• siemens scalance x200-4pirt firmware (< 5.5.0) • siemens scalance x201-3pirt firmware (< 5.5.0) • siemens scalance x202-2irt firmware (< 5.5.0) • siemens scalance x202-2pirt firmware (< 5.5.0) • siemens scalance x202-2pirt siplus net firmware (< 5.5.0) • siemens scalance x204irt firmware (< 5.5.0) • siemens scalance x307-3 firmware • siemens scalance x307-3ld firmware • siemens scalance x308-2 firmware • siemens scalance x308-2ld firmware • siemens scalance x308-2lh firmware • siemens scalance x308-2lh\+ firmware • siemens scalance x308-2m firmware • siemens scalance x308-2m ts firmware • siemens scalance x310 firmware • siemens scalance x310fe firmware • siemens scalance x320-1fe firmware • siemens scalance x320-3ldfe firmware • siemens scalance xb205-3 firmware (< 5.2.5) • siemens scalance xb205-3ld firmware (< 5.2.5) • siemens scalance xb208 firmware (< 5.2.5) • siemens scalance xb213-3 firmware (< 5.2.5) • siemens scalance xb213-3ld firmware (< 5.2.5) • siemens scalance xb216 firmware (< 5.2.5) • siemens scalance xc206-2 firmware (< 5.2.5) • siemens scalance xc206-2g poe firmware (< 5.2.5) • siemens scalance xc206-2g poe eec firmware (< 5.2.5) • siemens scalance xc206-2sfp firmware (< 5.2.5) • siemens scalance xc206-2sfp eec firmware (< 5.2.5) • siemens scalance xc206-2sfp g firmware (< 5.2.5) • siemens scalance xc206-2sfp g \(e\/ip\) firmware (< 5.2.5) • siemens scalance xc206-2sfp g eec firmware (< 5.2.5) • siemens scalance xc208 firmware (< 5.2.5) • siemens scalance xc208eec firmware (< 5.2.5) • siemens scalance xc208g firmware (< 5.2.5) • siemens scalance xc208g \(e\/ip\) firmware (< 5.2.5) • siemens scalance xc208g eec firmware (< 5.2.5) • siemens scalance xc208g poe firmware (< 5.2.5) • siemens scalance xc216 firmware (< 5.2.5) • siemens scalance xc216-4c firmware (< 5.2.5) • siemens scalance xc216-4c g firmware (< 5.2.5) • siemens scalance xc216-4c g \(e\/ip\) firmware (< 5.2.5) • siemens scalance xc216-4c g eec firmware (< 5.2.5) • siemens scalance xc216eec firmware (< 5.2.5) • siemens scalance xc224-4c g firmware (< 5.2.5) • siemens scalance xc224-4c g \(e\/ip\) firmware (< 5.2.5) • siemens scalance xc224-4c g eec firmware (< 5.2.5) • siemens scalance xc224 firmware (< 5.2.5) • siemens scalance xf201-3p irt firmware (< 5.2.5) • siemens scalance xf202-2p irt firmware (< 5.2.5) • siemens scalance xf204 firmware (< 5.2.5) • siemens scalance xf204-2 firmware (< 5.2.5) • siemens scalance xf204-2ba dna firmware (< 5.2.5) • siemens scalance xf204-2ba irt firmware (< 5.2.5) • siemens scalance xf204 dna firmware (< 5.2.5) • siemens scalance xf204irt firmware (< 5.2.5) • siemens scalance xf206-1 firmware (< 5.2.5) • siemens scalance xf208 firmware (< 5.2.5) • siemens scalance xp208 firmware (< 5.2.5) • siemens scalance xp208 \(eip\) firmware (< 5.2.5) … and 6 more