SB2021011306 - Multiple vulnerabilities in Siemens SCALANCE X-300 Switches

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Use of Hard-coded Cryptographic Key (CVE-ID: CVE-2020-28395)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to affected devices do not create a new unique private key after factory reset. A remote attacker can create a man-in-the-middle situation and decrypt previously captured traffic.

2) Heap-based buffer overflow (CVE-ID: CVE-2020-15800)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the web server. A remote attacker can send a specially crafted request, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation

Install update from vendor's website.

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-274900.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf