Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2020-15800
HistoryJan 12, 2021 - 9:15 p.m.

CVE-2020-15800

2021-01-1221:15:00
CWE-122
[email protected]
web.nvd.nist.gov
42
1
vulnerability
scalance
switch
webserver
heap overflow
security
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.3%

JSON

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.

CPENameOperatorVersion
siemens:scalance_x200-4pirt_firmwaresiemens scalance x200-4pirt firmwarelt5.5.0
siemens:scalance_x201-3pirt_firmwaresiemens scalance x201-3pirt firmwarelt5.5.0
siemens:scalance_x202-2irt_firmwaresiemens scalance x202-2irt firmwarelt5.5.0
siemens:scalance_x202-2pirt_firmwaresiemens scalance x202-2pirt firmwarelt5.5.0
siemens:scalance_x202-2pirt_siplus_net_firmwaresiemens scalance x202-2pirt siplus net firmwarelt5.5.0
siemens:scalance_x204irt_firmwaresiemens scalance x204irt firmwarelt5.5.0
siemens:scalance_x307-3_firmwaresiemens scalance x307-3 firmwareeq*
siemens:scalance_x307-3ld_firmwaresiemens scalance x307-3ld firmwareeq*
siemens:scalance_x308-2_firmwaresiemens scalance x308-2 firmwareeq*
siemens:scalance_x308-2ld_firmwaresiemens scalance x308-2ld firmwareeq*
Rows per page:
1-10 of 661

Social References

More

Related

prion 1
nessus 1
cvelist 1
ics 1
prion
prion
Design/Logic Flaw
2021-01-12 21:15:00
nessus
nessus
Siemens SCALANCE X Products Heap-Based Buffer Overflow (CVE-2020-15800)
2023-01-25 00:00:00
cvelist
cvelist
CVE-2020-15800
2021-01-12 20:18:33
ics
ics
Siemens SCALANCE X Products (Update B)
2021-09-14 12:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.3%

JSON
Related for CVE-2020-15800
prion1nessus1cvelist1ics1