Skip to content
OpenAdvisories
Medium SSA-353002 2 CVEs

SSA-353002: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family

Published Mar 12, 2024 · Updated Aug 12, 2025 · Revision 3

Vendor: Siemens Product: SCALANCE XB205-3 (SC, PN) (6GK5205-3BB00-2AB2) Product: SCALANCE XB205-3 (ST, E/IP) (6GK5205-3BB00-2TB2) Product: SCALANCE XB205-3 (ST, E/IP) (6GK5205-3BD00-2TB2) Product: SCALANCE XB205-3 (ST, PN) (6GK5205-3BD00-2AB2) Product: SCALANCE XB205-3LD (SC, E/IP) (6GK5205-3BF00-2TB2) Product: SCALANCE XB205-3LD (SC, PN) (6GK5205-3BF00-2AB2) Product: SCALANCE XB206-2 (SC) (6GK5206-2BD00-2TB2) Product: SCALANCE XB206-2 (ST/BFOC) (6GK5206-2BF00-2TB2) Product: SCALANCE XB206-2 LD (6GK5206-2BF00-2AB2) Product: SCALANCE XB206-2 SC (6GK5206-2BD00-2AB2) Product: SCALANCE XB206-2 ST (6GK5206-2BB00-2AB2) Product: SCALANCE XB206-2LD (6GK5206-2BB00-2TB2) Product: SCALANCE XB208 (E/IP) (6GK5208-0BA00-2TB2) Product: SCALANCE XB208 (PN) (6GK5208-0BA00-2AB2) Product: SCALANCE XB213-3 (SC, E/IP) (6GK5213-3BD00-2TB2) Product: SCALANCE XB213-3 (SC, PN) (6GK5213-3BD00-2AB2) Product: SCALANCE XB213-3 (ST, E/IP) (6GK5213-3BB00-2TB2) Product: SCALANCE XB213-3 (ST, PN) (6GK5213-3BB00-2AB2) Product: SCALANCE XB213-3LD (SC, E/IP) (6GK5213-3BF00-2TB2) Product: SCALANCE XB213-3LD (SC, PN) (6GK5213-3BF00-2AB2) Product: SCALANCE XB216 (E/IP) (6GK5216-0BA00-2TB2) Product: SCALANCE XB216 (PN) (6GK5216-0BA00-2AB2) Product: SCALANCE XC206-2 (SC) (6GK5206-2BD00-2AC2) Product: SCALANCE XC206-2 (ST/BFOC) (6GK5206-2BB00-2AC2) Product: SCALANCE XC206-2G PoE (54 V DC) (6GK5206-2RS00-5AC2) Product: SCALANCE XC206-2G PoE (6GK5206-2RS00-2AC2) Product: SCALANCE XC206-2G PoE EEC (54 V DC) (6GK5206-2RS00-5FC2) Product: SCALANCE XC206-2SFP (6GK5206-2BS00-2AC2) Product: SCALANCE XC206-2SFP EEC (6GK5206-2BS00-2FC2) +62 more

Summary

SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG Family is affected by multiple vulnerabilities.
CVE-2023-44318 and CVE-2023-44321 were previously published as part of SSA-699386.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 2

Revision history

  1. #3

    Added fix for CVE-2023-44321

  2. #2

    Clarify currently no fix planned

  3. #1

    Publication Date

References