Skip to content
OpenAdvisories
Critical SSA-274900 2 CVEs

SSA-274900: Use of Hardcoded Key in SCALANCE X Devices Under Certain Conditions

Published Jan 12, 2021 · Updated Dec 13, 2022 · Revision 4

Vendor: Siemens Product: SCALANCE X-200 switch family (incl. SIPLUS NET variants) Product: SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) Product: SCALANCE X-200RNA switch family Product: SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)

Summary

SCALANCE X devices might not generate a unique random key
after factory reset, and use a private key shipped with the firmware.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 2

Revision history

  1. #4

    Added SCALANCE X-200RNA switch family

  2. #3

    Added solution for SCALANCE X-200 switch family

  3. #2

    Added update information for SCALANCE X-200IRT switch family

  4. #1

    Publication Date

References