Lucene search

[email protected]CVE-2020-28395

HistoryJan 12, 2021 - 9:15 p.m.

CVE-2020-28395

2021-01-1221:15:00

CWE-321

[email protected]

web.nvd.nist.gov

cve-2020-28395

scalance

x-200rna

x-300

switch

vulnerability

decryption

traffic

nvd

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

40.7%

JSON

A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). Devices do not create a new unique private key after factory reset. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.

CPENameOperatorVersion
siemens:scalance_xr324-12m_firmwaresiemens scalance xr324-12m firmwarelt4.1.0
siemens:scalance_xr324-12m_ts_firmwaresiemens scalance xr324-12m ts firmwarelt4.1.0
siemens:scalance_xr324-4m_eec_firmwaresiemens scalance xr324-4m eec firmwarelt4.1.0
siemens:scalance_xr324-4m_poe_firmwaresiemens scalance xr324-4m poe firmwarelt4.1.0
siemens:scalance_xr324-4m_poe_ts_firmwaresiemens scalance xr324-4m poe ts firmwarelt4.1.0
siemens:scalance_xr324wg_firmwaresiemens scalance xr324wg firmwarelt4.1.0
siemens:scalance_xr326-2c_poe_wg_firmwaresiemens scalance xr326-2c poe wg firmwarelt4.1.0
siemens:scalance_xr328-4c_wg_firmwaresiemens scalance xr328-4c wg firmwarelt4.1.0

CPE	Name	Operator	Version
siemens:scalance_xr324-12m_firmware	siemens scalance xr324-12m firmware	lt	4.1.0
siemens:scalance_xr324-12m_ts_firmware	siemens scalance xr324-12m ts firmware	lt	4.1.0
siemens:scalance_xr324-4m_eec_firmware	siemens scalance xr324-4m eec firmware	lt	4.1.0
siemens:scalance_xr324-4m_poe_firmware	siemens scalance xr324-4m poe firmware	lt	4.1.0
siemens:scalance_xr324-4m_poe_ts_firmware	siemens scalance xr324-4m poe ts firmware	lt	4.1.0
siemens:scalance_xr324wg_firmware	siemens scalance xr324wg firmware	lt	4.1.0
siemens:scalance_xr326-2c_poe_wg_firmware	siemens scalance xr326-2c poe wg firmware	lt	4.1.0
siemens:scalance_xr328-4c_wg_firmware	siemens scalance xr328-4c wg firmware	lt	4.1.0

References

cert-portal.siemens.com/productcert/pdf/ssa-274900.pdf

us-cert.cisa.gov/ics/advisories/icsa-21-012-02

Social References

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

40.7%

JSON

Related for CVE-2020-28395

prion1 nessus1 cvelist1 ics1