CVE-2020-15799

MEDIUM

SCALANCE X-200 and X-200IRT Switch Families < V5.5.0 - Unauthenticated Denial of Service via Web Server URL

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.0049
EPSS Percentile 65.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-306
Status published
Products (50)
siemens/scalance_x200-4pirt_firmware < 5.5.0
siemens/scalance_x201-3pirt_firmware < 5.5.0
siemens/scalance_x202-2irt_firmware < 5.5.0
siemens/scalance_x202-2pirt_firmware < 5.5.0
siemens/scalance_x202-2pirt_siplus_net_firmware < 5.5.0
siemens/scalance_x204irt_firmware < 5.5.0
siemens/scalance_x307-3_firmware
siemens/scalance_x307-3ld_firmware
siemens/scalance_x308-2_firmware
siemens/scalance_x308-2ld_firmware
... and 40 more
Published Jan 12, 2021
Tracked Since Feb 18, 2026