Siemens Scalance Xb208 vulnerabilities
8 vulnerabilities
Known vulnerabilities in Siemens Scalance Xb208, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-25226siemensscalance x-200 switch family (incl. siplus net variants)+55
EPSS score1.74%
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore.CVE-2020-28391siemensscalance x-200 switch family (incl. siplus net variants)+56EPSS score1.13%
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.CVE-2020-15800siemensscalance x-200 switch family (incl. siplus net variants)+56EPSS score1.67%
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.CVE-2020-15799siemensscalance x-200 switch family (incl. siplus net variants)+55EPSS score1.09%
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.CVE-2022-46142siemensruggedcom_rm1224_lte\(4g\)_eu_firmware+174EPSS score0.27%
Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.CVE-2022-46143siemensruggedcom_rm1224_lte\(4g\)_eu_firmware+183EPSS score0.75%
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.CVE-2022-46140siemensruggedcom_rm1224_lte\(4g\)_eu_firmware+174EPSS score0.25%
Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.CVE-2019-6569siemensscalance_x-200_firmware+119EPSS score1.33%
The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.