CVE-2020-25226

🗓️ 12 Jan 2021 20:18:33Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 71 Views

Vulnerability in SCALANCE X-200 & X-200IRT switch family < V5.2.5 & < V5.5.0 allows buffer overflow, webserver crash

Reporter	Title	Published	Views	Family All 10
CNNVD	Siemens SCALANCE X-200IRT 缓冲区错误漏洞	12 Jan 202100:00	–	cnnvd
CNVD	Scalance X Products Heap Buffer Overflow Vulnerability (CNVD-2021-02594)	13 Jan 202100:00	–	cnvd
Cvelist	CVE-2020-25226	12 Jan 202120:18	–	cvelist
EUVD	EUVD-2020-17916	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Siemens products.	14 Sep 202100:00	–	ncsc
NVD	CVE-2020-25226	12 Jan 202121:15	–	nvd
OSV	CVE-2020-25226	12 Jan 202121:15	–	osv
Prion	Buffer overflow	12 Jan 202121:15	–	prion
RedhatCVE	CVE-2020-25226	22 May 202516:33	–	redhatcve
Tenable Nessus	Siemens SCALANCE X Products Heap-Based Buffer Overflow (CVE-2020-25226)	25 Jan 202300:00	–	nessus

NVD

Node

siemens scalance_x200-4pirt_firmwareRange<5.5.0

AND

siemens scalance_x200-4pirtMatch-

Node

siemens scalance_x201-3pirt_firmwareRange<5.5.0

AND

siemens scalance_x201-3pirtMatch-

Node

siemens scalance_x202-2irt_firmwareRange<5.5.0

AND

siemens scalance_x202-2irtMatch-

Node

siemens scalance_x202-2pirt_firmwareRange<5.5.0

AND

siemens scalance_x202-2pirtMatch-

Node

siemens scalance_x202-2pirt_siplus_net_firmwareRange<5.5.0

AND

siemens scalance_x202-2pirt_siplus_netMatch-

Node

siemens scalance_x204irt_firmwareRange<5.5.0

AND

siemens scalance_x204irtMatch-

Node

siemens scalance_x307-3_firmware

AND

siemens scalance_x307-3Match-

Node

siemens scalance_x307-3ld_firmware

AND

siemens scalance_x307-3ldMatch-

Node

siemens scalance_x308-2_firmware

AND

siemens scalance_x308-2Match-

Node

siemens scalance_x308-2ld_firmware

AND

siemens scalance_x308-2ldMatch-

Node

siemens scalance_x308-2lh_firmware

AND

siemens scalance_x308-2lhMatch-

Node

siemens scalance_x308-2lh+_firmware

AND

siemens scalance_x308-2lh+Match-

Node

siemens scalance_x308-2m_firmware

AND

siemens scalance_x308-2mMatch-

Node

siemens scalance_x308-2m_ts_firmware

AND

siemens scalance_x308-2m_tsMatch-

Node

siemens scalance_x310_firmware

AND

siemens scalance_x310Match-

Node

siemens scalance_x310fe_firmware

AND

siemens scalance_x310feMatch-

Node

siemens scalance_x320-1fe_firmware

AND

siemens scalance_x320-1feMatch-

Node

siemens scalance_x320-3ldfe_firmware

AND

siemens scalance_x320-3ldfeMatch-

Node

siemens scalance_xb205-3_firmwareRange<5.2.5

AND

siemens scalance_xb205-3Match-

Node

siemens scalance_xb205-3ld_firmwareRange<5.2.5

AND

siemens scalance_xb205-3ldMatch-

Node

siemens scalance_xb208_firmwareRange<5.2.5

AND

siemens scalance_xb208Match-

Node

siemens scalance_xb213-3_firmwareRange<5.2.5

AND

siemens scalance_xb213-3Match-

Node

siemens scalance_xb213-3ld_firmwareRange<5.2.5

AND

siemens scalance_xb213-3ldMatch-

Node

siemens scalance_xb216_firmwareRange<5.2.5

AND

siemens scalance_xb216Match-

Node

siemens scalance_xc206-2_firmwareRange<5.2.5

AND

siemens scalance_xc206-2Match-

Node

siemens scalance_xc206-2g_poe__firmwareRange<5.2.5

AND

siemens scalance_xc206-2g_poe_Match-

Node

siemens scalance_xc206-2g_poe_eec_firmwareRange<5.2.5

AND

siemens scalance_xc206-2g_poe_eecMatch-

Node

siemens scalance_xc206-2sfp_firmwareRange<5.2.5

AND

siemens scalance_xc206-2sfpMatch-

Node

siemens scalance_xc206-2sfp_eec_firmwareRange<5.2.5

AND

siemens scalance_xc206-2sfp_eecMatch-

Node

siemens scalance_xc206-2sfp_g_firmwareRange<5.2.5

AND

siemens scalance_xc206-2sfp_gMatch-

Node

siemens scalance_xc206-2sfp_g_(e/ip)_firmwareRange<5.2.5

AND

siemens scalance_xc206-2sfp_g_(e/ip)Match-

Node

siemens scalance_xc206-2sfp_g_eec_firmwareRange<5.2.5

AND

siemens scalance_xc206-2sfp_g_eecMatch-

Node

siemens scalance_xc208_firmwareRange<5.2.5

AND

siemens scalance_xc208Match-

Node

siemens scalance_xc208eec_firmwareRange<5.2.5

AND

siemens scalance_xc208eecMatch-

Node

siemens scalance_xc208g_firmwareRange<5.2.5

AND

siemens scalance_xc208gMatch-

Node

siemens scalance_xc208g_(e/ip)_firmwareRange<5.2.5

AND

siemens scalance_xc208g_(e/ip)Match-

Node

siemens scalance_xc208g_eec_firmwareRange<5.2.5

AND

siemens scalance_xc208g_eecMatch-

Node

siemens scalance_xc208g_poe_firmwareRange<5.2.5

AND

siemens scalance_xc208g_poeMatch-

Node

siemens scalance_xc216_firmwareRange<5.2.5

AND

siemens scalance_xc216Match-

Node

siemens scalance_xc216-4c_firmwareRange<5.2.5

AND

siemens scalance_xc216-4cMatch-

Node

siemens scalance_xc216-4c_g_firmwareRange<5.2.5

AND

siemens scalance_xc216-4c_gMatch-

Node

siemens scalance_xc216-4c_g_(e/ip)_firmwareRange<5.2.5

AND

siemens scalance_xc216-4c_g_(e/ip)Match-

Node

siemens scalance_xc216-4c_g_eec_firmwareRange<5.2.5

AND

siemens scalance_xc216-4c_g_eecMatch-

Node

siemens scalance_xc216eec_firmwareRange<5.2.5

AND

siemens scalance_xc216eecMatch-

Node

siemens scalance_xc224-4c_g__firmwareRange<5.2.5

AND

siemens scalance_xc224-4c_g_Match-

Node

siemens scalance_xc224-4c_g_(e/ip)_firmwareRange<5.2.5

AND

siemens scalance_xc224-4c_g_(e/ip)Match-

Node

siemens scalance_xc224-4c_g_eec_firmwareRange<5.2.5

AND

siemens scalance_xc224-4c_g_eecMatch-

Node

siemens scalance_xc224__firmwareRange<5.2.5

AND

siemens scalance_xc224_Match-

Node

siemens scalance_xf201-3p_irt_firmwareRange<5.2.5

AND

siemens scalance_xf201-3p_irtMatch-

Node

siemens scalance_xf202-2p_irt_firmwareRange<5.2.5

AND

siemens scalance_xf202-2p_irtMatch-

Node

siemens scalance_xf204_firmwareRange<5.2.5

AND

siemens scalance_xf204Match-

Node

siemens scalance_xf204-2_firmwareRange<5.2.5

AND

siemens scalance_xf204-2Match-

Node

siemens scalance_xf204-2ba_dna_firmwareRange<5.2.5

AND

siemens scalance_xf204-2ba_dnaMatch-

Node

siemens scalance_xf204-2ba_irt_firmwareRange<5.2.5

AND

siemens scalance_xf204-2ba_irtMatch-

Node

siemens scalance_xf204_dna_firmwareRange<5.2.5

AND

siemens scalance_xf204_dnaMatch-

Node

siemens scalance_xf204irt_firmwareRange<5.2.5

AND

siemens scalance_xf204irtMatch-

Node

siemens scalance_xf206-1_firmwareRange<5.2.5

AND

siemens scalance_xf206-1Match-

Node

siemens scalance_xf208_firmwareRange<5.2.5

AND

siemens scalance_xf208Match-

Node

siemens scalance_xp208_firmwareRange<5.2.5

AND

siemens scalance_xp208Match-

Node

siemens scalance_xp208_(eip)_firmwareRange<5.2.5

AND

siemens scalance_xp208_(eip)Match-

Node

siemens scalance_xp208eec_firmwareRange<5.2.5

AND

siemens scalance_xp208eecMatch-

Node

siemens scalance_xp208poe_eec_firmwareRange<5.2.5

AND

siemens scalance_xp208poe_eecMatch-

Node

siemens scalance_xp216_firmwareRange<5.2.5

AND

siemens scalance_xp216Match-

Node

siemens scalance_xp216_(eip)_firmwareRange<5.2.5

AND

siemens scalance_xp216_(eip)Match-

Node

siemens scalance_xp216eec_firmwareRange<5.2.5

AND

siemens scalance_xp216eecMatch-

Node

siemens scalance_xp216poe_eec_firmwareRange<5.2.5

AND

siemens scalance_xp216poe_eecMatch-

[
  {
    "product": "SCALANCE X-200 switch family (incl. SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.5.0"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf

21 Nov 2024 05:17Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

CVSS 210

EPSS0.00684