CVE-2020-25226 Memory corruption in SCALANCE X-200 switch family (incl. SIPLUS NET variants)
An attacker can cause a denial of service on Siemens SCALANCE switches by triggering a buffer overflow in the web server via a crafted request.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-25226?
CVE-2020-25226 is a critical memory corruption vulnerability in Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants), published on 12 Jan 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore.
Which versions are affected by CVE-2020-25226?
It affects 66 products.
Products include Siemens Scalance X200-4pirt Firmware, Siemens Scalance X201-3pirt Firmware, Siemens Scalance X202-2irt Firmware, Siemens Scalance X202-2pirt Firmware, Siemens Scalance X202-2pirt Siplus Net Firmware, Siemens Scalance X204irt Firmware and 60 more.
How do I fix CVE-2020-25226?
No fix has been published for CVE-2020-25226 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-25226 being exploited?
There is no known exploitation of CVE-2020-25226 in the wild and no public exploit code.
Other vulnerabilities in Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants)
Sources
Also known as GHSA-p724-hcmr-xf8c.