CVE-2020-28391

Description

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.

CVSS 3.1

5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

1.12% probability · 64th percentile

CISA KEV

Not listed

Weakness

CWE-321, CWE-798

Affected

siemens/scalance x200-4pirt firmware · siemens/scalance x201-3pirt firmware · siemens/scalance x202-2irt firmware · siemens/scalance x202-2pirt firmware · siemens/scalance x202-2pirt siplus net firmware · siemens/scalance x204irt firmware · siemens/scalance x307-3 firmware · siemens/scalance x307-3ld firmware · siemens/scalance x308-2 firmware · siemens/scalance x308-2ld firmware · siemens/scalance x308-2lh firmware · siemens/scalance x308-2lh\+ firmware · siemens/scalance x308-2m firmware · siemens/scalance x308-2m ts firmware · siemens/scalance x310 firmware · siemens/scalance x310fe firmware · siemens/scalance x320-1fe firmware · siemens/scalance x320-3ldfe firmware · siemens/scalance xb205-3 firmware · siemens/scalance xb205-3ld firmware · +40 more

Source

productcert@siemens.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.