CVE-2020-15799: siemens scalance x-200 switch family (incl. siplus net variants)

Vulnerability summary

CVE-2020-15799 is a high (CVSS 7.1) vulnerability in siemens scalance x-200 switch family (incl. siplus net variants). EPSS estimates a 1.09% chance of exploitation in the next 30 days, higher than 64.8% of scored vulnerabilities.

Timeline

1. 12-01-2021
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.

• CWE-306Missing Authentication for Critical FunctionThe product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.