CVE-2020-28395

🗓️ 12 Jan 2021 00:00:00Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 72 Views

Vulnerability in SCALANCE X-200RNA & X-300 switch families, allowing for decryption of captured traffic

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2020-28395	13 Jan 202100:47	–	circl
CNNVD	多款Siemens产品信任管理问题漏洞	12 Jan 202100:00	–	cnnvd
CNVD	Scalance X Products hard-coded encryption key vulnerability (CNVD-2021-02592)	13 Jan 202100:00	–	cnvd
Cvelist	CVE-2020-28395	12 Jan 202100:00	–	cvelist
EUVD	EUVD-2020-20854	7 Oct 202500:30	–	euvd
ICS	Siemens SCALANCE X Switches (Update B)	12 Jan 202100:00	–	ics
NCSC	Vulnerabilities fixed in Siemens Scalance products	12 Jan 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in Siemens products.	14 Sep 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in Siemens products	13 Dec 202200:00	–	ncsc
NVD	CVE-2020-28395	12 Jan 202121:15	–	nvd

NVD

Node

siemens scalance_xr324-12m_firmwareRange<4.1.0

AND

siemens scalance_xr324-12mMatch-

Node

siemens scalance_xr324-12m_ts_firmwareRange<4.1.0

AND

siemens scalance_xr324-12m_tsMatch-

Node

siemens scalance_xr324-4m_eec_firmwareRange<4.1.0

AND

siemens scalance_xr324-4m_eecMatch-

Node

siemens scalance_xr324-4m_poe_firmwareRange<4.1.0

AND

siemens scalance_xr324-4m_poeMatch-

Node

siemens scalance_xr324-4m_poe_ts_firmwareRange<4.1.0

AND

siemens scalance_xr324-4m_poe_tsMatch-

Node

siemens scalance_xr324wg_firmwareRange<4.1.0

AND

siemens scalance_xr324wgMatch-

Node

siemens scalance_xr326-2c_poe_wg_firmwareRange<4.1.0

AND

siemens scalance_xr326-2c_poe_wgMatch-

Node

siemens scalance_xr328-4c_wg_firmwareRange<4.1.0

AND

siemens scalance_xr328-4c_wgMatch-

[
  {
    "vendor": "Siemens",
    "product": "SCALANCE X-200RNA switch family",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)",
    "versions": [
      {
        "version": "All versions < V4.1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-274900.pdf
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-21-012-02

21 Nov 2024 05:22Current

5.4Medium risk

Vulners AI Score5.4

CVSS 24.3

CVSS 3.15.9

EPSS0.0016