SB2021011306 - Multiple vulnerabilities in Siemens SCALANCE X-300 Switches

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2021011306

SB2021011306 - Multiple vulnerabilities in Siemens SCALANCE X-300 Switches

Published: January 13, 2021

Security Bulletin ID SB2021011306
CSH Severity
High
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 vulnerabilities.


1) Use of Hard-coded Cryptographic Key (CVE-ID: CVE-2020-28395)

CWE-ID: CWE-321 - Use of Hard-coded Cryptographic Key

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber


The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to affected devices do not create a new unique private key after factory reset. A remote attacker can create a man-in-the-middle situation and decrypt previously captured traffic.


2) Heap-based buffer overflow (CVE-ID: CVE-2020-15800)

CWE-ID: CWE-122 - Heap-based Buffer Overflow

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber


The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the web server. A remote attacker can send a specially crafted request, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install update from vendor's website.

References