CVE-2020-15799

Summary

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.

Affected Software

VendorProductVersion RangeStatus
SiemensSCALANCE X-200 switch family (incl. SIPLUS NET variants)All versions < V5.2.5affected
SiemensSCALANCE X-200IRT switch family (incl. SIPLUS NET variants)All versions < V5.5.0affected

Weaknesses

  • CWE-306: CWE-306: Missing Authentication for Critical Function

ADP Enrichment

CVE Program Container

Additional References

References