CVE-2020-15800: Siemens Scalance x200-4pirt Firmware

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.

Affected products

  • Siemens Scalance x200-4pirt Firmware: before 5.5.0 (fixed in 5.5.0)
  • Siemens Scalance x201-3pirt Firmware: before 5.5.0 (fixed in 5.5.0)
  • Siemens Scalance x202-2irt Firmware: before 5.5.0 (fixed in 5.5.0)
  • Siemens Scalance x202-2pirt Firmware: before 5.5.0 (fixed in 5.5.0)
  • Siemens Scalance x202-2pirt Siplus Net Firmware: before 5.5.0 (fixed in 5.5.0)
  • Siemens Scalance x204irt Firmware: before 5.5.0 (fixed in 5.5.0)
  • Siemens Scalance x307-3 Firmware: any version
  • Siemens Scalance x307-3ld Firmware: any version
  • Siemens Scalance x308-2 Firmware: any version
  • Siemens Scalance x308-2ld Firmware: any version
  • Siemens Scalance x308-2lh+ Firmware: any version
  • Siemens Scalance x308-2lh Firmware: any version
  • Siemens Scalance x308-2m Firmware: any version
  • Siemens Scalance x308-2m Ts Firmware: any version
  • Siemens Scalance x310 Firmware: any version
  • Siemens Scalance x310fe Firmware: any version
  • Siemens Scalance x320-1fe Firmware: any version
  • Siemens Scalance x320-3ldfe Firmware: any version
  • Siemens Scalance XB205-3 Firmware: before 5.2.5 (fixed in 5.2.5)
  • Siemens Scalance XB205-3ld Firmware: before 5.2.5 (fixed in 5.2.5)
  • Siemens Scalance XB208 Firmware: before 5.2.5 (fixed in 5.2.5)
  • Siemens Scalance XB213-3 Firmware: before 5.2.5 (fixed in 5.2.5)
  • Siemens Scalance XB213-3ld Firmware: before 5.2.5 (fixed in 5.2.5)
  • Siemens Scalance XB216 Firmware: before 5.2.5 (fixed in 5.2.5)
  • Siemens Scalance XC206-2 Firmware: before 5.2.5 (fixed in 5.2.5)
  • and 41 more

Published 2021-01-12. Last modified 2026-06-17.