Advisories · Technology

Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants).

Every CVE that names Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-25226 CVE record

Heap-based buffer overflow in Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants) and others
- Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants)
- Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
- Memory corruption
Not analysed yet 12 Jan 2021
CVE-2020-15800 CVE record

Heap-based buffer overflow in Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants) and others
- Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants)
- Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
- Memory corruption
Not analysed yet 12 Jan 2021
CVE-2020-15799 CVE record

Missing authentication in Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants) and others
- Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants)
- Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
- Authentication bypass
Not analysed yet 12 Jan 2021
CVE-2020-28391 CVE record

Hard-coded cryptographic key in Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants) and others
- Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants)
- Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
- Hard-coded credentials
Not analysed yet 12 Jan 2021
CVE-2019-13924 CVE record

Protection mechanism failure in Siemens SCALANCE S602 and others
- Siemens SCALANCE S602
- Siemens SCALANCE S612
- CWE-693
Not analysed yet 11 Feb 2020
CVE-2019-10942 CVE record

Uncontrolled resource consumption in Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants) and others
- Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants)
- Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
- Denial of service
Not analysed yet 13 Aug 2019
CVE-2019-6567 CVE record

A vulnerability has been identified in SCALANCE X-200 switch family (incl.
- Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants)
- Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
- CWE-257
Not analysed yet 12 Jun 2019
CVE-2018-4833 CVE record

Heap-based buffer overflow in Siemens RFID 181EIP and others
- Siemens RFID 181EIP
- Siemens RUGGEDCOM Win
- Memory corruption
Not analysed yet 14 Jun 2018
CVE-2018-4848 CVE record

Cross-site scripting in Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants) and others
- Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants)
- Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
- Cross-site scripting (XSS)
Not analysed yet 14 Jun 2018