PT-2021-2203 · Siemens · Scalance X-300+2

Published 2021-01-12 · Updated 2022-12-13 · CVE-2020-28395

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: SCALANCE X-200 versions prior to V3.2.7 SCALANCE X-200IRT versions prior to V3.2.7 SCALANCE X-300 versions prior to V4.1.0

Description: The issue is related to the reset function of industrial switches, which does not generate a new cryptographic key after a factory reset. This could allow a remote attacker to elevate their privileges and potentially lead to a man-in-the-middle situation, enabling them to decrypt previously captured traffic.

Recommendations: For SCALANCE X-200 versions prior to V3.2.7, update to version V3.2.7 or later. For SCALANCE X-200IRT versions prior to V3.2.7, update to version V3.2.7 or later. For SCALANCE X-300 versions prior to V4.1.0, update to version V4.1.0 or later.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-321

Related Identifiers

BDU:2021-01112

CVE-2020-28395

Affected Products

Scalance X-200

Scalance X-200Irt

Scalance X-300

References · 6

• https://us-cert.cisa.gov/ics/advisories/icsa-21-012-02 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-28395 · Security Note
• https://osv.dev/vulnerability/CVE-2020-28395 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-274900.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01112 · Security Note
• https://t.me/cibsecurity/22066 · Telegram Post