CVE-2020-28393: Siemens Scalance Xm-400 Firmware

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).

Affected products

• Siemens Scalance Xm-400 Firmware: before 6.4 (fixed in 6.4)
• Siemens Scalance XM408-4c Firmware: before 6.4 (fixed in 6.4)
• Siemens Scalance XM408-4c l3 Firmware: before 6.4 (fixed in 6.4)
• Siemens Scalance XM408-8c Firmware: before 6.4 (fixed in 6.4)
• Siemens Scalance XM408-8c l3 Firmware: before 6.4 (fixed in 6.4)
• Siemens Scalance XM416-4c Firmware: before 6.4 (fixed in 6.4)
• Siemens Scalance XM416-4c l3 Firmware: before 6.4 (fixed in 6.4)
• Siemens Scalance XR524 Firmware: before 6.4 (fixed in 6.4)
• Siemens Scalance XR526 Firmware: before 6.4 (fixed in 6.4)
• Siemens Scalance XR528 Firmware: before 6.4 (fixed in 6.4)
• Siemens Scalance XR552 Firmware: before 6.4 (fixed in 6.4)

Published 2021-05-12. Last modified 2026-06-17.