Skip to content
OpenAdvisories
Critical SSA-187092 2 CVEs

SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200

Published Apr 13, 2021 · Updated Sep 14, 2021 · Revision 2

Vendor: Siemens Product: SCALANCE X200-4P IRT Product: SCALANCE X201-3P IRT Product: SCALANCE X201-3P IRT PRO Product: SCALANCE X202-2 IRT Product: SCALANCE X202-2P IRT (incl. SIPLUS NET variant) Product: SCALANCE X202-2P IRT PRO Product: SCALANCE X204 IRT Product: SCALANCE X204 IRT PRO Product: SCALANCE X204-2 (incl. SIPLUS NET variant) Product: SCALANCE X204-2FM Product: SCALANCE X204-2LD (incl. SIPLUS NET variant) Product: SCALANCE X204-2LD TS Product: SCALANCE X204-2TS Product: SCALANCE X206-1 Product: SCALANCE X206-1LD Product: SCALANCE X208 (incl. SIPLUS NET variant) Product: SCALANCE X208PRO Product: SCALANCE X212-2 (incl. SIPLUS NET variant) Product: SCALANCE X212-2LD Product: SCALANCE X216 Product: SCALANCE X224 Product: SCALANCE XF201-3P IRT Product: SCALANCE XF202-2P IRT Product: SCALANCE XF204 Product: SCALANCE XF204 IRT Product: SCALANCE XF204-2 (incl. SIPLUS NET variant) Product: SCALANCE XF204-2BA IRT Product: SCALANCE XF206-1 Product: SCALANCE XF208

Summary

Several SCALANCE X-200 switches contain buffer overflow vulnerabilities in the web server.

In the most severe case an attacker could potentially remotely execute code.

Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 2

Revision history

  1. #2

    Added solution for SCALANCE X-200 switch family

  2. #1

    Publication Date

References