Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-15800

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants)

  • All versions < V5.2.5affected

Siemens SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)

  • All versions < V5.5.0affected

Siemens SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)

  • All versions < V4.1.0affected

References