Vulnerability · Published Jan 12, 2021 · Assigned by siemens
CVE-2020-28391
Medium 5.9
In plain English
A medium-severity security flaw in SCALANCE X-200 switch family (incl. SIPLUS NET variants) from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities).
Official description
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SCALANCE X-200 switch family (incl. SIPLUS NET variants) | All versions < V5.2.5 |
| Siemens | SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) | All versions < V5.5.0 |
| Siemens | SCALANCE X-200RNA switch family | All versions < V3.2.7 |
Weakness: CWE-321