Lucene search

[email protected]CVE-2020-28391

HistoryJan 12, 2021 - 9:15 p.m.

CVE-2020-28391

2021-01-1221:15:00

CWE-321

[email protected]

web.nvd.nist.gov

cve-2020-28391

vulnerability

scalance

switch

siplus net

c-plug

man-in-the-middle

decrypt

nvd

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

40.7%

JSON

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.

CPENameOperatorVersion
siemens:scalance_x200-4pirt_firmwaresiemens scalance x200-4pirt firmwarelt5.5.0
siemens:scalance_x201-3pirt_firmwaresiemens scalance x201-3pirt firmwarelt5.5.0
siemens:scalance_x202-2irt_firmwaresiemens scalance x202-2irt firmwarelt5.5.0
siemens:scalance_x202-2pirt_firmwaresiemens scalance x202-2pirt firmwarelt5.5.0
siemens:scalance_x202-2pirt_siplus_net_firmwaresiemens scalance x202-2pirt siplus net firmwarelt5.5.0
siemens:scalance_x204irt_firmwaresiemens scalance x204irt firmwarelt5.5.0
siemens:scalance_x307-3_firmwaresiemens scalance x307-3 firmwareeq*
siemens:scalance_x307-3ld_firmwaresiemens scalance x307-3ld firmwareeq*
siemens:scalance_x308-2_firmwaresiemens scalance x308-2 firmwareeq*
siemens:scalance_x308-2ld_firmwaresiemens scalance x308-2ld firmwareeq*

CPE	Name	Operator	Version
siemens:scalance_x200-4pirt_firmware	siemens scalance x200-4pirt firmware	lt	5.5.0
siemens:scalance_x201-3pirt_firmware	siemens scalance x201-3pirt firmware	lt	5.5.0
siemens:scalance_x202-2irt_firmware	siemens scalance x202-2irt firmware	lt	5.5.0
siemens:scalance_x202-2pirt_firmware	siemens scalance x202-2pirt firmware	lt	5.5.0
siemens:scalance_x202-2pirt_siplus_net_firmware	siemens scalance x202-2pirt siplus net firmware	lt	5.5.0
siemens:scalance_x204irt_firmware	siemens scalance x204irt firmware	lt	5.5.0
siemens:scalance_x307-3_firmware	siemens scalance x307-3 firmware	eq	*
siemens:scalance_x307-3ld_firmware	siemens scalance x307-3ld firmware	eq	*
siemens:scalance_x308-2_firmware	siemens scalance x308-2 firmware	eq	*
siemens:scalance_x308-2ld_firmware	siemens scalance x308-2ld firmware	eq	*

Rows per page:

1-10 of 661

References

cert-portal.siemens.com/productcert/pdf/ssa-274900.pdf

us-cert.cisa.gov/ics/advisories/icsa-21-012-02

Social References

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

40.7%

JSON

Related for CVE-2020-28391

prion1 cvelist1 nessus1 ics1