Security Flaw in SCALANCE X-200RNA and X-300 Switch Families by Siemens
CVE-2020-28395
5.9MEDIUM
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 12 January 2021
What is CVE-2020-28395?
A flaw exists in the SCALANCE X-200RNA and X-300 switch families due to the failure of these devices to generate a new unique private key after a factory reset. This vulnerability can be exploited by an attacker to perform man-in-the-middle attacks, allowing them to intercept and decrypt previously captured traffic, potentially compromising sensitive data.
Affected Version(s)
SCALANCE X-200RNA switch family All versions < V3.2.7
SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) All versions < V4.1.0