CVE-2020-25226: Buffer Overflow
Published Jan 12, 2021
·Updated
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore.
Affected Software
132 affected components
Siemens Scalance X200-4pirt Firmware<5.5.0
Siemens Scalance X200-4pirt
Siemens Scalance X201-3pirt Firmware<5.5.0
Siemens Scalance X201-3pirt
Siemens Scalance X202-2irt Firmware<5.5.0
Siemens Scalance X202-2irt
Siemens Scalance X202-2pirt Firmware<5.5.0
Siemens Scalance X202-2pirt
Siemens Scalance X202-2pirt Siplus Net Firmware<5.5.0
Siemens Scalance X202-2pirt Siplus Net
Siemens Scalance X204irt Firmware<5.5.0
Siemens Scalance X204irt
Siemens Scalance X307-3 Firmware
Siemens Scalance X307-3
Siemens Scalance X307-3ld Firmware
Siemens Scalance X307-3ld
Siemens Scalance X308-2 Firmware
Siemens Scalance X308-2
Siemens Scalance X308-2ld Firmware
Siemens Scalance X308-2ld
Siemens Scalance X308-2lh Firmware
Siemens Scalance X308-2lh
Siemens Scalance X308-2lh\+ Firmware
Siemens Scalance X308-2lh\+
Siemens Scalance X308-2m Firmware
Siemens Scalance X308-2m
Siemens Scalance X308-2m Ts Firmware
Siemens Scalance X308-2m Ts
Siemens Scalance X310 Firmware
Siemens Scalance X310
Siemens Scalance X310fe Firmware
Siemens Scalance X310fe
Siemens Scalance X320-1fe Firmware
Siemens Scalance X320-1fe
Siemens Scalance X320-3ldfe Firmware
Siemens Scalance X320-3ldfe
Siemens Scalance Xb205-3 Firmware<5.2.5
Siemens Scalance Xb205-3
Siemens Scalance Xb205-3ld Firmware<5.2.5
Siemens Scalance Xb205-3ld
Siemens Scalance Xb208 Firmware<5.2.5
Siemens Scalance Xb208
Siemens Scalance Xb213-3 Firmware<5.2.5
Siemens Scalance Xb213-3
Siemens Scalance Xb213-3ld Firmware<5.2.5
Siemens Scalance Xb213-3ld
Siemens Scalance Xb216 Firmware<5.2.5
Siemens Scalance Xb216
Siemens Scalance Xc206-2 Firmware<5.2.5
Siemens Scalance Xc206-2
Siemens Scalance Xc206-2g Poe Firmware<5.2.5
Siemens Scalance Xc206-2g Poe
Siemens Scalance Xc206-2g Poe Eec Firmware<5.2.5
Siemens Scalance Xc206-2g Poe Eec
Siemens Scalance Xc206-2sfp Firmware<5.2.5
Siemens Scalance Xc206-2sfp
Siemens Scalance Xc206-2sfp Eec Firmware<5.2.5
Siemens Scalance Xc206-2sfp Eec
Siemens Scalance Xc206-2sfp G Firmware<5.2.5
Siemens Scalance Xc206-2sfp G
Siemens Scalance Xc206-2sfp G \(e\/ip\) Firmware<5.2.5
Siemens Scalance Xc206-2sfp G \(e\/ip\)
Siemens Scalance Xc206-2sfp G Eec Firmware<5.2.5
Siemens Scalance Xc206-2sfp G Eec
Siemens Scalance Xc208 Firmware<5.2.5
Siemens Scalance Xc208
Siemens Scalance Xc208eec Firmware<5.2.5
Siemens Scalance Xc208eec
Siemens Scalance Xc208g Firmware<5.2.5
Siemens Scalance Xc208g
Siemens Scalance Xc208g \(e\/ip\) Firmware<5.2.5
Siemens Scalance Xc208g \(e\/ip\)
Siemens Scalance Xc208g Eec Firmware<5.2.5
Siemens Scalance Xc208g Eec
Siemens Scalance Xc208g Poe Firmware<5.2.5
Siemens Scalance Xc208g Poe
Siemens Scalance Xc216 Firmware<5.2.5
Siemens Scalance Xc216
Siemens Scalance Xc216-4c Firmware<5.2.5
Siemens Scalance Xc216-4c
Siemens Scalance Xc216-4c G Firmware<5.2.5
Siemens Scalance Xc216-4c G
Siemens Scalance Xc216-4c G \(e\/ip\) Firmware<5.2.5
Siemens Scalance Xc216-4c G \(e\/ip\)
Siemens Scalance Xc216-4c G Eec Firmware<5.2.5
Siemens Scalance Xc216-4c G Eec
Siemens Scalance Xc216eec Firmware<5.2.5
Siemens Scalance Xc216eec
Siemens Scalance Xc224-4c G Firmware<5.2.5
Siemens Scalance Xc224-4c G
Siemens Scalance Xc224-4c G \(e\/ip\) Firmware<5.2.5
Siemens Scalance Xc224-4c G \(e\/ip\)
Siemens Scalance Xc224-4c G Eec Firmware<5.2.5
Siemens Scalance Xc224-4c G Eec
Siemens Scalance Xc224 Firmware<5.2.5
Siemens Scalance Xc224
Siemens Scalance Xf201-3p Irt Firmware<5.2.5
Siemens Scalance Xf201-3p Irt
Siemens Scalance Xf202-2p Irt Firmware<5.2.5
Siemens Scalance Xf202-2p Irt
Siemens Scalance Xf204 Firmware<5.2.5
Siemens Scalance Xf204
Siemens Scalance Xf204-2 Firmware<5.2.5
Siemens Scalance Xf204-2
Siemens Scalance Xf204-2ba Dna Firmware<5.2.5
Siemens Scalance Xf204-2ba Dna
Siemens Scalance Xf204-2ba Irt Firmware<5.2.5
Siemens Scalance Xf204-2ba Irt
Siemens Scalance Xf204 Dna Firmware<5.2.5
Siemens Scalance Xf204 Dna
Siemens Scalance Xf204irt Firmware<5.2.5
Siemens Scalance Xf204irt
Siemens Scalance Xf206-1 Firmware<5.2.5
Siemens Scalance Xf206-1
Siemens Scalance Xf208 Firmware<5.2.5
Siemens Scalance Xf208
Siemens Scalance Xp208 Firmware<5.2.5
Siemens Scalance Xp208
Siemens Scalance Xp208 \(eip\) Firmware<5.2.5
Siemens Scalance Xp208 \(eip\)
Siemens Scalance Xp208eec Firmware<5.2.5
Siemens Scalance Xp208eec
Siemens Scalance Xp208poe Eec Firmware<5.2.5
Siemens Scalance Xp208poe Eec
Siemens Scalance Xp216 Firmware<5.2.5
Siemens Scalance Xp216
Siemens Scalance Xp216 \(eip\) Firmware<5.2.5
Siemens Scalance Xp216 \(eip\)
Siemens Scalance Xp216eec Firmware<5.2.5
Siemens Scalance Xp216eec
Siemens Scalance Xp216poe Eec Firmware<5.2.5
Siemens Scalance Xp216poe Eec
Event History
Jan 12, 2021
CVE Published
via MITRE·08:18 PM
Data Sourced
via MITRE·08:18 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-25226?
CVE-2020-25226 is classified as a medium severity vulnerability that could lead to a buffer overflow.
2
How do I fix CVE-2020-25226?
To remediate CVE-2020-25226, you should upgrade your SCALANCE X-200 and X-200IRT devices to version 5.2.5 or newer.
3
What devices are affected by CVE-2020-25226?
CVE-2020-25226 affects all versions of SCALANCE X-200 switches prior to V5.2.5 and SCALANCE X-200IRT switches prior to V5.5.0.
4
What type of vulnerability is CVE-2020-25226?
CVE-2020-25226 is a buffer overflow vulnerability located in the web server component of affected SCALANCE devices.
5
Are there any available fixes for CVE-2020-25226?
Yes, Siemens has provided firmware updates to address CVE-2020-25226, which are available for download.