CVE-2020-25226: Siemens Scalance x200-4pirt Firmware

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore.

Affected products

  • Siemens Scalance x200-4pirt Firmware: before 5.5.0 (fixed in 5.5.0)
  • Siemens Scalance x201-3pirt Firmware: before 5.5.0 (fixed in 5.5.0)
  • Siemens Scalance x202-2irt Firmware: before 5.5.0 (fixed in 5.5.0)
  • Siemens Scalance x202-2pirt Firmware: before 5.5.0 (fixed in 5.5.0)
  • Siemens Scalance x202-2pirt Siplus Net Firmware: before 5.5.0 (fixed in 5.5.0)
  • Siemens Scalance x204irt Firmware: before 5.5.0 (fixed in 5.5.0)
  • Siemens Scalance x307-3 Firmware: any version
  • Siemens Scalance x307-3ld Firmware: any version
  • Siemens Scalance x308-2 Firmware: any version
  • Siemens Scalance x308-2ld Firmware: any version
  • Siemens Scalance x308-2lh+ Firmware: any version
  • Siemens Scalance x308-2lh Firmware: any version
  • Siemens Scalance x308-2m Firmware: any version
  • Siemens Scalance x308-2m Ts Firmware: any version
  • Siemens Scalance x310 Firmware: any version
  • Siemens Scalance x310fe Firmware: any version
  • Siemens Scalance x320-1fe Firmware: any version
  • Siemens Scalance x320-3ldfe Firmware: any version
  • Siemens Scalance XB205-3 Firmware: before 5.2.5 (fixed in 5.2.5)
  • Siemens Scalance XB205-3ld Firmware: before 5.2.5 (fixed in 5.2.5)
  • Siemens Scalance XB208 Firmware: before 5.2.5 (fixed in 5.2.5)
  • Siemens Scalance XB213-3 Firmware: before 5.2.5 (fixed in 5.2.5)
  • Siemens Scalance XB213-3ld Firmware: before 5.2.5 (fixed in 5.2.5)
  • Siemens Scalance XB216 Firmware: before 5.2.5 (fixed in 5.2.5)
  • Siemens Scalance XC206-2 Firmware: before 5.2.5 (fixed in 5.2.5)
  • and 41 more

Published 2021-01-12. Last modified 2026-06-17.