GCVE - cpe:2.3:h:siemens:scalance_x202-2pirt:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:siemens:scalance_x202-2pirt:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Scalance X202 2Pirt (`f9a01393-7c2b-5422-95f1-cddb2cdccd68`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-28391`	not_vulnerable	2026-06-08 05:23:54.114959	Details available A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic. Published: 2021-01-12T00:00:00.000Z Updated: 2024-08-04T16:33:59.106Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-274900.pdf https://us-cert.cisa.gov/ics/advisories/icsa-21-012-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25226`	not_vulnerable	2026-06-08 05:22:36.486228	Details available A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore. Published: 2021-01-12T20:18:33.000Z Updated: 2024-08-04T15:33:04.885Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-15800`	not_vulnerable	2026-06-08 05:19:26.809826	Details available A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily. Published: 2021-01-12T20:18:33.000Z Updated: 2024-08-04T13:30:21.877Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-15799`	not_vulnerable	2026-06-08 05:19:26.718455	Details available A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products. Published: 2021-01-12T20:18:33.000Z Updated: 2024-08-04T13:30:21.812Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.