vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2020-15799

MEDIUM
6.5
CVSS Score
Published: January 12, 2021 at 08:18 PM UTC
Updated: June 17, 2026 at 02:57 AM UTC
132 products affected across 1 vendorScalance XF204 FirmwareScalance X308-2ld FirmwareScalance X308-2lh+ Firmware

Using SCALANCE X-200 switch family (incl. SIPLUS NET variants) by Siemens?

Get instant alerts when new vulnerabilities affect SCALANCE X-200 switch family (incl. SIPLUS NET variants) - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.5
Exploit prediction
EPSS 1%

Description

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Scalance X200-4p Irt Firmware· Siemens
95%
v < 5.5.0
Affected range stops below 5.5.0, so it looks safe — our inference, not a vendor statement
siemens-scalance-x200-4pirt (same device)
Scalance X201-3p Irt Firmware· Siemens
95%
v < 5.5.0
Affected range stops below 5.5.0, so it looks safe — our inference, not a vendor statement
siemens-scalance-x201-3pirt (same device)
Scalance X202-2irt Firmware· Siemens
95%
v < 5.5.0
Affected range stops below 5.5.0, so it looks safe — our inference, not a vendor statement
siemens-scalance-x202-2irt (same device)
Scalance X202-2p Irt Firmware· Siemens
95%
v < 5.5.0
Affected range stops below 5.5.0, so it looks safe — our inference, not a vendor statement
siemens-scalance-x202-2pirt (same device)
Scalance X202-2pirt Siplus .NET Firmware· Siemens
95%
v < 5.5.0
Affected range stops below 5.5.0, so it looks safe — our inference, not a vendor statement
siemens-scalance-x202-2pirt-siplus-net (same device)
Scalance X204IRT Firmware· Siemens
95%
v < 5.5.0
Affected range stops below 5.5.0, so it looks safe — our inference, not a vendor statement
siemens-scalance-x204irt (same device)
Scalance X307-3 Firmware· Siemens
95%
All versions
siemens-scalance-x307-3 (same device)
Scalance X307-3ld Firmware· Siemens
95%
All versions
siemens-scalance-x307-3ld (same device)
Scalance X308-2 Firmware· Siemens
95%
All versions
siemens-scalance-x308-2 (same device)
Scalance X308-2ld Firmware· Siemens
95%
All versions
siemens-scalance-x308-2ld (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

x_refsource_MISCVendor Advisory
Source: [email protected]
https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf

CVSS

6.5MEDIUM[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-306

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card