CRITICAL🇵🇱 Wersja polska

CVE-2020-15800

CVSS 9.8v3.1pub. 2021-01-12upd. 2024-11-21

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Siemens Scalance X200 4pirt

    HW
    Siemens
    all versions

  • Siemens Scalance X200 4pirt Firmware

    OS
    Siemens
    < 5.5.0

  • Siemens Scalance X201 3pirt

    HW
    Siemens
    all versions

  • Siemens Scalance X201 3pirt Firmware

    OS
    Siemens
    < 5.5.0

  • Siemens Scalance X202 2irt

    HW
    Siemens
    all versions

  • Siemens Scalance X202 2irt Firmware

    OS
    Siemens
    < 5.5.0

  • Siemens Scalance X202 2pirt

    HW
    Siemens
    all versions

  • Siemens Scalance X202 2pirt Firmware

    OS
    Siemens
    < 5.5.0

  • Siemens Scalance X202 2pirt Siplus Net

    HW
    Siemens
    all versions

  • Siemens Scalance X202 2pirt Siplus Net Firmware

    OS
    Siemens
    < 5.5.0

  • Siemens Scalance X204irt

    HW
    Siemens
    all versions

  • Siemens Scalance X204irt Firmware

    OS
    Siemens
    < 5.5.0

  • Siemens Scalance X307 3

    HW
    Siemens
    all versions

  • Siemens Scalance X307 3 Firmware

    OS
    Siemens
    all versions

  • Siemens Scalance X307 3ld

    HW
    Siemens
    all versions

  • Siemens Scalance X307 3ld Firmware

    OS
    Siemens
    all versions

  • Siemens Scalance X308 2

    HW
    Siemens
    all versions

  • Siemens Scalance X308 2 Firmware

    OS
    Siemens
    all versions

  • Siemens Scalance X308 2ld

    HW
    Siemens
    all versions

  • Siemens Scalance X308 2ld Firmware

    OS
    Siemens
    all versions

  • Siemens Scalance X308 2lh

    HW
    Siemens
    all versions

  • Siemens Scalance X308 2lh\+

    HW
    Siemens
    all versions

  • Siemens Scalance X308 2lh Firmware

    OS
    Siemens
    all versions

  • Siemens Scalance X308 2lh\+ Firmware

    OS
    Siemens
    all versions

  • Siemens Scalance X308 2m

    HW
    Siemens
    all versions

  • Siemens Scalance X308 2m Firmware

    OS
    Siemens
    all versions

  • Siemens Scalance X308 2m Ts

    HW
    Siemens
    all versions

  • Siemens Scalance X308 2m Ts Firmware

    OS
    Siemens
    all versions

  • Siemens Scalance X310

    HW
    Siemens
    all versions

  • Siemens Scalance X310fe

    HW
    Siemens
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2022-36323CRITICAL9.1PL ✓same product

Siemens Scalance M-800/S615/SC-600 — command injection umożliwiający uzyskanie root shell

CVE-2022-26649CRITICAL9.6PL ✓same product

Siemens SCALANCE X — błędna walidacja URI powodująca crash urządzenia

CVE-2022-25752CRITICAL9.8PL ✓same product

Siemens SCALANCE X — słabe generowanie identyfikatorów sesji w webserwerze

CVE-2021-25668CRITICAL9.8PL ✓same product

Siemens SCALANCE X200/X204 — heap buffer overflow przez żądania POST

CVE-2021-25669CRITICAL9.8PL ✓same product

Stack-based buffer overflow w serwerze HTTP urządzeń Siemens SCALANCE X200