Buffer Overflow Vulnerability in SCALANCE X-200 and X-200IRT Switch Families by Siemens
CVE-2020-25226
Key Information:
- Vendor
- Siemens
- Status
- Vendor
- CVE Published:
- 12 January 2021
Summary
A buffer overflow vulnerability has been identified within the web server of the SCALANCE X-200 and X-200IRT switch families provided by Siemens. This flaw affects all versions of the SCALANCE X-200 switch family prior to V5.2.5 and the X-200IRT switch family versions prior to V5.5.0. An attacker can exploit this vulnerability by sending a specially crafted request to the web server, potentially causing it to become unresponsive and unable to recover. Organizations utilizing these switches are advised to implement security measures and consider updating their systems to mitigate the risks associated with this vulnerability.
Affected Version(s)
SCALANCE X-200 switch family (incl. SIPLUS NET variants) All versions < V5.2.5
SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) All versions < V5.5.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved