Skip to content
OpenAdvisories
High SSA-100232 1 CVE

SSA-100232: Denial-of-Service vulnerability in SCALANCE X Switches

Published Aug 13, 2019 · Updated Feb 8, 2022 · Revision 5

Vendor: Siemens Product: SCALANCE X-200 switch family (incl. SIPLUS NET variants) Product: SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) Product: SCALANCE X204RNA (HSR) Product: SCALANCE X204RNA (PRP) Product: SCALANCE X204RNA EEC (HSR) Product: SCALANCE X204RNA EEC (PRP) Product: SCALANCE X204RNA EEC (PRP/HSR)

Summary

A vulnerability in several SCALANCE X devices could allow an unauthenticated attacker with network access to an affected device to perform a denial-of-service.

Siemens has released an update for SCALANCE X-200IRT and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #5

    Specifically added that SCALANCE X204RNA devices do not have any fix planned

  2. #4

    Added solution for SCALANCE X-200 switch family

  3. #3

    Added update information for SCALANCE X-200IRT switch family

  4. #2

    SIPLUS devices now explicitly mentioned in the list of affected products

  5. #1

    Publication Date

References