Strix
26.1K

CVE-2020-28391

MEDIUMCVSS 5.9/10EPSS 1.12%

Last modified

CVE-2020-28391 is a medium-severity vulnerability rated 5.9/10 on the CVSS scale. A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. EPSS estimates a 1.12% chance of exploitation in the next 30 days.

Description

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.

Metrics

CVSS 3.1
5.9/10

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
1.12%

62.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
SiemensScalance X200-4pirt Firmware< 5.5.0
SiemensScalance X201-3pirt Firmware< 5.5.0
SiemensScalance X202-2irt Firmware< 5.5.0
SiemensScalance X202-2pirt Firmware< 5.5.0
SiemensScalance X202-2pirt Siplus Net Firmware< 5.5.0
SiemensScalance X204irt Firmware< 5.5.0
SiemensScalance X307-3 FirmwareAll versions
SiemensScalance X307-3ld FirmwareAll versions
SiemensScalance X308-2 FirmwareAll versions
SiemensScalance X308-2ld FirmwareAll versions
SiemensScalance X308-2lh FirmwareAll versions
SiemensScalance X308-2lh\+ FirmwareAll versions
SiemensScalance X308-2m FirmwareAll versions
SiemensScalance X308-2m Ts FirmwareAll versions
SiemensScalance X310 FirmwareAll versions
SiemensScalance X310fe FirmwareAll versions
SiemensScalance X320-1fe FirmwareAll versions
SiemensScalance X320-3ldfe FirmwareAll versions
SiemensScalance Xb205-3 Firmware< 5.2.5
SiemensScalance Xb205-3ld Firmware< 5.2.5
SiemensScalance Xb208 Firmware< 5.2.5
SiemensScalance Xb213-3 Firmware< 5.2.5
SiemensScalance Xb213-3ld Firmware< 5.2.5
SiemensScalance Xb216 Firmware< 5.2.5
SiemensScalance Xc206-2 Firmware< 5.2.5
SiemensScalance Xc206-2g Poe Firmware< 5.2.5
SiemensScalance Xc206-2g Poe Eec Firmware< 5.2.5
SiemensScalance Xc206-2sfp Firmware< 5.2.5
SiemensScalance Xc206-2sfp Eec Firmware< 5.2.5
SiemensScalance Xc206-2sfp G Firmware< 5.2.5
SiemensScalance Xc206-2sfp G \(E\/Ip\) Firmware< 5.2.5
SiemensScalance Xc206-2sfp G Eec Firmware< 5.2.5
SiemensScalance Xc208 Firmware< 5.2.5
SiemensScalance Xc208eec Firmware< 5.2.5
SiemensScalance Xc208g Firmware< 5.2.5
SiemensScalance Xc208g \(E\/Ip\) Firmware< 5.2.5
SiemensScalance Xc208g Eec Firmware< 5.2.5
SiemensScalance Xc208g Poe Firmware< 5.2.5
SiemensScalance Xc216 Firmware< 5.2.5
SiemensScalance Xc216-4c Firmware< 5.2.5
SiemensScalance Xc216-4c G Firmware< 5.2.5
SiemensScalance Xc216-4c G \(E\/Ip\) Firmware< 5.2.5
SiemensScalance Xc216-4c G Eec Firmware< 5.2.5
SiemensScalance Xc216eec Firmware< 5.2.5
SiemensScalance Xc224-4c G Firmware< 5.2.5
SiemensScalance Xc224-4c G \(E\/Ip\) Firmware< 5.2.5
SiemensScalance Xc224-4c G Eec Firmware< 5.2.5
SiemensScalance Xc224 Firmware< 5.2.5
SiemensScalance Xf201-3p Irt Firmware< 5.2.5
SiemensScalance Xf202-2p Irt Firmware< 5.2.5

Showing 50 of 66 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2020-28391?
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.
How severe is CVE-2020-28391?
CVE-2020-28391 has a CVSS score of 5.9/10 (MEDIUM severity). The EPSS model estimates a 1.12% probability of exploitation in the next 30 days.
How do I fix CVE-2020-28391?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-28391?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST