Skip to content
OpenAdvisories
Medium SSA-479249 1 CVE

SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices

Published Apr 11, 2023 · Updated Apr 11, 2023

Vendor: Siemens Product: SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) Product: SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3) Product: SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6) Product: SCALANCE X202-2IRT (6GK5202-2BB00-2BA3) Product: SCALANCE X202-2IRT (6GK5202-2BB10-2BA3) Product: SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3) Product: SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6) Product: SCALANCE X204IRT (6GK5204-0BA00-2BA3) Product: SCALANCE X204IRT (6GK5204-0BA10-2BA3) Product: SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6) Product: SCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2) Product: SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2) Product: SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2) Product: SCALANCE XF204IRT (6GK5204-0BA00-2BF2) Product: SIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3)

Summary

The SSH server on SCALANCE X-200IRT devices is configured to offer weak ciphers by default. This could
allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over
the connection between legitimate clients and the affected device.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #1

    Publication date

References