CVE-2020-25226

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.5, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.5.0. The web server of the affected devices contains a vulnerability that may lead to a buffer overflow...

CVE-2020-25226

Siemens SCALANCE X products are affected by CVE-2020-25226: heap-based/buffer overflow in the devices’ web server. Affected: SCALANCE X-200 (incl. SIPLUS NET) below v5.2.5, SCALANCE X-200IRT below v5.5.0, and SCALANCE X-300 below v4.1.0 (X-300 also affected by CVE-2020-15800 per ICS advisory). Ex...

Siemens SCALANCE X Products (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE X Products Vulnerabilities: Missing Authentication for Critical Function, Heap-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the...