Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2020-25226
HistoryJan 12, 2021 - 9:15 p.m.

CVE-2020-25226

2021-01-1221:15:00
CWE-122
[email protected]
web.nvd.nist.gov
41
1
cve-2020-25226
vulnerability
scalance x-200
scalance x-200irt
buffer overflow
webserver crash
nvd
siplus net

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.3%

JSON

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore.

CPENameOperatorVersion
siemens:scalance_x200-4pirt_firmwaresiemens scalance x200-4pirt firmwarelt5.5.0
siemens:scalance_x201-3pirt_firmwaresiemens scalance x201-3pirt firmwarelt5.5.0
siemens:scalance_x202-2irt_firmwaresiemens scalance x202-2irt firmwarelt5.5.0
siemens:scalance_x202-2pirt_firmwaresiemens scalance x202-2pirt firmwarelt5.5.0
siemens:scalance_x202-2pirt_siplus_net_firmwaresiemens scalance x202-2pirt siplus net firmwarelt5.5.0
siemens:scalance_x204irt_firmwaresiemens scalance x204irt firmwarelt5.5.0
siemens:scalance_x307-3_firmwaresiemens scalance x307-3 firmwareeq*
siemens:scalance_x307-3ld_firmwaresiemens scalance x307-3ld firmwareeq*
siemens:scalance_x308-2_firmwaresiemens scalance x308-2 firmwareeq*
siemens:scalance_x308-2ld_firmwaresiemens scalance x308-2ld firmwareeq*
Rows per page:
1-10 of 661

Social References

More

Related

nessus 1
prion 1
cvelist 1
ics 1
nessus
nessus
Siemens SCALANCE X Products Heap-Based Buffer Overflow (CVE-2020-25226)
2023-01-25 00:00:00
prion
prion
Buffer overflow
2021-01-12 21:15:00
cvelist
cvelist
CVE-2020-25226
2021-01-12 20:18:33
ics
ics
Siemens SCALANCE X Products (Update B)
2021-09-14 12:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.3%

JSON
Related for CVE-2020-25226
nessus1prion1cvelist1ics1