Summary
Several SCALANCE X switches are affected by an Authentication Bypass vulnerability. The vulnerability allows an unauthenticated attacker to violate access-control rules. The vulnerability can be exploited by sending a GET request to a specific uniform resource locator on the web configuration interface of the device.
The security vulnerability could be exploited by an attacker with network access to the affected systems. An attacker could use the vulnerability to obtain sensitive information or change the device configuration.
Siemens has released updates for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCAL…
Revision history
-
#4
Added fix for SCALANCE X-200RNA devices
-
#3
Fix planned for SCALANCE X204RNA devices. Expanded SCALANCE X-300 switch family list
-
#2
Specifically added that SCALANCE X204RNA devices do not have any fix planned
-
#1
Publication Date
References
-
SSA-443566: Authentication Bypass in SCALANCE X Switches Families - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-443566.pdf
-
SSA-443566: Authentication Bypass in SCALANCE X Switches Families - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-443566.txt