A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.

Project Subscriptions

Vendors Products
Siemens Subscribe
Scalance X200-4pirt Subscribe
Scalance X200-4pirt Firmware Subscribe
Scalance X201-3pirt Subscribe
Scalance X201-3pirt Firmware Subscribe
Scalance X202-2irt Subscribe
Scalance X202-2irt Firmware Subscribe
Scalance X202-2pirt Subscribe
Scalance X202-2pirt Firmware Subscribe
Scalance X202-2pirt Siplus Net Subscribe
Scalance X202-2pirt Siplus Net Firmware Subscribe
Scalance X204irt Subscribe
Scalance X204irt Firmware Subscribe
Scalance X307-3 Subscribe
Scalance X307-3 Firmware Subscribe
Scalance X307-3ld Subscribe
Scalance X307-3ld Firmware Subscribe
Scalance X308-2 Subscribe
Scalance X308-2 Firmware Subscribe
Scalance X308-2ld Subscribe
Scalance X308-2ld Firmware Subscribe
Scalance X308-2lh Subscribe
Scalance X308-2lh\+ Subscribe
Scalance X308-2lh\+ Firmware Subscribe
Scalance X308-2lh Firmware Subscribe
Scalance X308-2m Subscribe
Scalance X308-2m Firmware Subscribe
Scalance X308-2m Ts Subscribe
Scalance X308-2m Ts Firmware Subscribe
Scalance X310 Subscribe
Scalance X310 Firmware Subscribe
Scalance X310fe Subscribe
Scalance X310fe Firmware Subscribe
Scalance X320-1fe Subscribe
Scalance X320-1fe Firmware Subscribe
Scalance X320-3ldfe Subscribe
Scalance X320-3ldfe Firmware Subscribe
Scalance Xb205-3 Subscribe
Scalance Xb205-3 Firmware Subscribe
Scalance Xb205-3ld Subscribe
Scalance Xb205-3ld Firmware Subscribe
Scalance Xb208 Subscribe
Scalance Xb208 Firmware Subscribe
Scalance Xb213-3 Subscribe
Scalance Xb213-3 Firmware Subscribe
Scalance Xb213-3ld Subscribe
Scalance Xb213-3ld Firmware Subscribe
Scalance Xb216 Subscribe
Scalance Xb216 Firmware Subscribe
Scalance Xc206-2 Subscribe
Scalance Xc206-2 Firmware Subscribe
Scalance Xc206-2g Poe Subscribe
Scalance Xc206-2g Poe Firmware Subscribe
Scalance Xc206-2g Poe Eec Subscribe
Scalance Xc206-2g Poe Eec Firmware Subscribe
Scalance Xc206-2sfp Subscribe
Scalance Xc206-2sfp Eec Subscribe
Scalance Xc206-2sfp Eec Firmware Subscribe
Scalance Xc206-2sfp Firmware Subscribe
Scalance Xc206-2sfp G Subscribe
Scalance Xc206-2sfp G \(e\/ip\) Subscribe
Scalance Xc206-2sfp G \(e\/ip\) Firmware Subscribe
Scalance Xc206-2sfp G Eec Subscribe
Scalance Xc206-2sfp G Eec Firmware Subscribe
Scalance Xc206-2sfp G Firmware Subscribe
Scalance Xc208 Subscribe
Scalance Xc208 Firmware Subscribe
Scalance Xc208eec Subscribe
Scalance Xc208eec Firmware Subscribe
Scalance Xc208g Subscribe
Scalance Xc208g \(e\/ip\) Subscribe
Scalance Xc208g \(e\/ip\) Firmware Subscribe
Scalance Xc208g Eec Subscribe
Scalance Xc208g Eec Firmware Subscribe
Scalance Xc208g Firmware Subscribe
Scalance Xc208g Poe Subscribe
Scalance Xc208g Poe Firmware Subscribe
Scalance Xc216 Subscribe
Scalance Xc216-4c Subscribe
Scalance Xc216-4c Firmware Subscribe
Scalance Xc216-4c G Subscribe
Scalance Xc216-4c G \(e\/ip\) Subscribe
Scalance Xc216-4c G \(e\/ip\) Firmware Subscribe
Scalance Xc216-4c G Eec Subscribe
Scalance Xc216-4c G Eec Firmware Subscribe
Scalance Xc216-4c G Firmware Subscribe
Scalance Xc216 Firmware Subscribe
Scalance Xc216eec Subscribe
Scalance Xc216eec Firmware Subscribe
Scalance Xc224-4c G Subscribe
Scalance Xc224-4c G \(e\/ip\) Subscribe
Scalance Xc224-4c G \(e\/ip\) Firmware Subscribe
Scalance Xc224-4c G Firmware Subscribe
Scalance Xc224-4c G Eec Subscribe
Scalance Xc224-4c G Eec Firmware Subscribe
Scalance Xc224 Subscribe
Scalance Xc224 Firmware Subscribe
Scalance Xf201-3p Irt Subscribe
Scalance Xf201-3p Irt Firmware Subscribe
Scalance Xf202-2p Irt Subscribe
Scalance Xf202-2p Irt Firmware Subscribe
Scalance Xf204 Subscribe
Scalance Xf204-2 Subscribe
Scalance Xf204-2 Firmware Subscribe
Scalance Xf204-2ba Dna Subscribe
Scalance Xf204-2ba Dna Firmware Subscribe
Scalance Xf204-2ba Irt Subscribe
Scalance Xf204-2ba Irt Firmware Subscribe
Scalance Xf204 Dna Subscribe
Scalance Xf204 Dna Firmware Subscribe
Scalance Xf204 Firmware Subscribe
Scalance Xf204irt Subscribe
Scalance Xf204irt Firmware Subscribe
Scalance Xf206-1 Subscribe
Scalance Xf206-1 Firmware Subscribe
Scalance Xf208 Subscribe
Scalance Xf208 Firmware Subscribe
Scalance Xp208 Subscribe
Scalance Xp208 \(eip\) Subscribe
Scalance Xp208 \(eip\) Firmware Subscribe
Scalance Xp208 Firmware Subscribe
Scalance Xp208eec Subscribe
Scalance Xp208eec Firmware Subscribe
Scalance Xp208poe Eec Subscribe
Scalance Xp208poe Eec Firmware Subscribe
Scalance Xp216 Subscribe
Scalance Xp216 \(eip\) Subscribe
Scalance Xp216 \(eip\) Firmware Subscribe
Scalance Xp216 Firmware Subscribe
Scalance Xp216eec Subscribe
Scalance Xp216eec Firmware Subscribe
Scalance Xp216poe Eec Subscribe
Scalance Xp216poe Eec Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2020-20850 A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2024-08-04T16:33:59.106Z

Reserved: 2020-11-10T00:00:00

Link: CVE-2020-28391

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-01-12T21:15:18.120

Modified: 2024-11-21T05:22:42.433

Link: CVE-2020-28391

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses