Network Reboot Vulnerability in SCALANCE X-200 Switch Family by Siemens
CVE-2020-15799
6.5MEDIUM
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 12 January 2021
What is CVE-2020-15799?
A serious vulnerability exists in the SCALANCE X-200 switch family, including SIPLUS NET variants, which could allow an unauthenticated attacker to remotely reboot the device via special URLs sent through the integrated web server. This security issue affects all versions prior to V5.2.5 for the SCALANCE X-200 and prior to V5.5.0 for the SCALANCE X-200IRT. Organizations using these switches should assess their network security and apply necessary patches to mitigate potential risks.
Affected Version(s)
SCALANCE X-200 switch family (incl. SIPLUS NET variants) All versions < V5.2.5
SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) All versions < V5.5.0