critical
9.8
CWE
122 787
Advisory Published
Updated

CVE-2020-15800

First published: Tue Jan 12 2021(Updated: )

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.

Credit: productcert@siemens.com

Affected SoftwareAffected VersionHow to fix
Siemens SCALANCE X200-4PIRT<5.5.0
Siemens SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)
Siemens SCALANCE X201-3P IRT Firmware<5.5.0
Siemens Scalance X201-3P IRT Pro Firmware
Siemens SCALANCE X202-2P IRT firmware<5.5.0
Siemens SCALANCE X202-2IRT
Siemens SCALANCE X202-2PIRT SIPLUS NET Firmware<5.5.0
Siemens SCALANCE X202-2P IRT SIPLUS NET
Siemens SIPLUS NET SCALANCE X202-2P IRT<5.5.0
Siemens SCALANCE X202-2P IRT SIPLUS NET
Siemens Scalance X204 IRT Firmware<5.5.0
Siemens Scalance X-200IRT
Siemens Scalance X307-3LD
Siemens SCALANCE X307-3
Siemens Scalance X307-3LD
Siemens Scalance X307-3LD
Siemens SIPLUS NET SCALANCE X308-2 firmware
Siemens Scalance X308-2M PoE
Siemens Scalance X308-2LD
Siemens Scalance X308-2LD
Siemens Scalance X308-2LH
Siemens Scalance X308-2LH
Siemens Scalance X308-2LH+ Firmware
Siemens Scalance X308-2LH+
Siemens Scalance X308-2M
Siemens Scalance X308-2M Firmware
Siemens Scalance X308-2M PoE
Siemens SCALANCE X308-2M TS (6GK5308-2GG00-2CA2)
Siemens Scalance X310
Siemens Scalance X310
Siemens Scalance X310FE
Siemens Scalance X310FE
Siemens Scalance X320-1FE
Siemens SCALANCE X320-1FE
Siemens Scalance X320-3LDFE Firmware
Siemens Scalance X320-3LDFE Firmware
Siemens Scalance XB205-3LD<5.2.5
Siemens Scalance XB205-3LD
Siemens Scalance XB205-3LD<5.2.5
Siemens Scalance XB205-3
Siemens Scalance XB208<5.2.5
Siemens Scalance XB208
Siemens Scalance XB213-3<5.2.5
Siemens Scalance XB213-3LD Firmware
Siemens SCALANCE XB213-3LD (SC, E/IP) Firmware<5.2.5
Siemens SCALANCE XB213-3 LD (SC, E/IP)
Siemens Scalance XB216<5.2.5
Siemens Scalance XB216 Firmware
Siemens SCALANCE XC206-2 (SC) Firmware<5.2.5
Siemens Scalance XC206-2 Firmware
Siemens Scalance XC206-2G PoE<5.2.5
Siemens SCALANCE XC206-2G PoE (54 V DC)
Siemens SCALANCE XC206-2G PoE EEC (54V DC) Firmware<5.2.5
Siemens SCALANCE XC206-2G PoE EEC (54V DC) Firmware
Siemens Scalance XC206-2SFP G (E/IP) Firmware<5.2.5
Siemens Scalance XC206-2SFP Firmware
Siemens Siplus Net Scalance XC206-2SFP<5.2.5
Siemens Scalance XC206-2SFP EEC Firmware
Siemens SCALANCE XC206-2SFP G<5.2.5
Siemens Scalance XC206-2SFP
Siemens Scalance XC206-2SFP G (E/IP) Firmware<5.2.5
Siemens Scalance XC206-2SFP G (E/IP)
Siemens Siplus Net Scalance XC206-2SFP Firmware<5.2.5
Siemens Scalance XC206-2SFP G EEC Firmware
Siemens Siplus Net Scalance XC208 Firmware<5.2.5
Siemens Siplus Net Scalance XC208
Siemens SCALANCE XC208 EEC Firmware<5.2.5
Siemens SCALANCE XC208 EEC Firmware
Siemens Scalance XC208G (E/IP)<5.2.5
Siemens Scalance XC208G (E/IP)
Siemens Scalance XC208G (E/IP) Firmware<5.2.5
Siemens Scalance XC208G (E/IP)
Siemens SCALANCE XC208G (EIP DEF.)<5.2.5
Siemens Scalance XC208G (E/IP)
Siemens SCALANCE XC208G Firmware<5.2.5
Siemens SCALANCE XC208G PoE (54 V DC)
Siemens Scalance XC216EEC Firmware<5.2.5
Siemens SCALANCE XC216-3G PoE (54 V DC)
Siemens SCALANCE XC216-4C G Firmware<5.2.5
Siemens Scalance XC216-4C Firmware
Siemens Scalance XC216-4C G (E/IP) Firmware<5.2.5
Siemens Scalance XC216-4C G (E/IP)
Siemens Scalance XC216-4C G (E/IP)<5.2.5
Siemens Scalance XC216-4C G (E/IP)
Siemens Scalance XC216-4C G EEC<5.2.5
Siemens Scalance XC216-4C Firmware
Siemens Scalance XC216EEC<5.2.5
Siemens Scalance XC216EEC Firmware
Siemens Scalance XC224-4C G EEC Firmware<5.2.5
Siemens SCALANCE XC224-4C G (EIP DEF.) Firmware
Siemens Scalance XC224-4C G (E/IP) Firmware<5.2.5
Siemens Scalance XC224-4C G (E/IP)
Siemens Scalance XC224-4C G (E/IP) Firmware<5.2.5
Siemens Scalance XC224-4C G (E/IP) Firmware
Siemens Scalance Xc224 Firmware<5.2.5
Siemens SCALANCE XC224-4C G
Siemens Scalance XF201-3P IRT<5.2.5
Siemens SCALANCE XF201-3P IRT
Siemens Scalance XF202-2P IRT<5.2.5
Siemens SCALANCE XF202-2P IRT
Siemens Scalance XF204 Firmware<5.2.5
Siemens Scalance XF204-2 Firmware
Siemens Scalance XF204-2 Firmware<5.2.5
Siemens SCALANCE XF204-2
Siemens Scalance XF204-2BA DNA<5.2.5
Siemens Scalance XF204-2BA DNA
Siemens Scalance XF204-2BA IRT<5.2.5
Siemens SCALANCE XF204IRT
Siemens Scalance XF204 DNA<5.2.5
Siemens Scalance XF204 DNA
Siemens SCALANCE XF204IRT<5.2.5
Siemens SCALANCE XF204IRT
Siemens Scalance XF206-1<5.2.5
Siemens SCALANCE XF206-1
Siemens Scalance XF208<5.2.5
Siemens SCALANCE XF208
Siemens SCALANCE XP208 (Ethernet/IP)<5.2.5
Siemens Scalance XP208 (EIP)
Siemens Scalance XP208 (EIP) Firmware<5.2.5
Siemens Scalance XP208 (EIP)
Siemens Scalance XP208EEC<5.2.5
Siemens SCALANCE XP208PoE EEC
Siemens SCALANCE XP208PoE EEC<5.2.5
Siemens SCALANCE XP208PoE EEC Firmware
Siemens Scalance XP216 (EIP) Firmware<5.2.5
Siemens Scalance XP216 (EIP) Firmware
Siemens Scalance XP216 (EIP) Firmware<5.2.5
Siemens Scalance XP216 (EIP)
Siemens Scalance XP216EEC<5.2.5
Siemens Scalance XP216EEC Firmware
Siemens Scalance XP216PoE EEC<5.2.5
Siemens Scalance XP216PoE EEC Firmware

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2020-15800?

    The severity of CVE-2020-15800 is considered high due to the potential unauthorized access it permits.

  • How do I fix CVE-2020-15800?

    To fix CVE-2020-15800, update your SCALANCE X-200, X-300, and related switches to the latest firmware version available: V5.2.5 or higher.

  • Which SCALANCE switch models are affected by CVE-2020-15800?

    CVE-2020-15800 affects several models, including SCALANCE X-200 series, X-200IRT series, and X-300 series with firmware versions below specified thresholds.

  • Can CVE-2020-15800 be exploited remotely?

    Yes, CVE-2020-15800 can be exploited remotely if the affected devices are not properly secured.

  • Are there any workarounds for CVE-2020-15800?

    While the best mitigation is to update the firmware, temporarily disabling remote management features can act as a workaround until updates are applied.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203