CVE-2020-15799
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.
- Record
CVE-2020-15799- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-306
- Updated
- 2026-11-02
CVE List No score
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.
- Record
CVE-2020-15799- Weakness
- CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2020-7782 No score
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.
- Record
EUVD-2020-7782- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2jjq-jgq8-2h5h
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.
- Record
GHSA-2jjq-jgq8-2h5h- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
Affected products
- siemens scalance x-200 switch family (incl. siplus net variants)
- siemens scalance x-200irt switch family (incl. siplus net variants)
- siemens scalance x200-4pirt firmware
- siemens scalance x201-3pirt firmware
- siemens scalance x202-2irt firmware
- siemens scalance x202-2pirt firmware
- siemens scalance x202-2pirt siplus net firmware
- siemens scalance x204irt firmware
- siemens scalance x307-3 firmware
- siemens scalance x307-3ld firmware
- siemens scalance x308-2 firmware
- siemens scalance x308-2ld firmware
Show 56 moreShow less
- siemens scalance x308-2lh\+ firmware
- siemens scalance x308-2lh firmware
- siemens scalance x308-2m firmware
- siemens scalance x308-2m ts firmware
- siemens scalance x310 firmware
- siemens scalance x310fe firmware
- siemens scalance x320-1fe firmware
- siemens scalance x320-3ldfe firmware
- siemens scalance xb205-3 firmware
- siemens scalance xb205-3ld firmware
- siemens scalance xb208 firmware
- siemens scalance xb213-3 firmware
- siemens scalance xb213-3ld firmware
- siemens scalance xb216 firmware
- siemens scalance xc206-2 firmware
- siemens scalance xc206-2g poe firmware
- siemens scalance xc206-2g poe eec firmware
- siemens scalance xc206-2sfp eec firmware
- siemens scalance xc206-2sfp firmware
- siemens scalance xc206-2sfp g \(e\/ip\) firmware
- siemens scalance xc206-2sfp g eec firmware
- siemens scalance xc206-2sfp g firmware
- siemens scalance xc208 firmware
- siemens scalance xc208eec firmware
- siemens scalance xc208g \(e\/ip\) firmware
- siemens scalance xc208g eec firmware
- siemens scalance xc208g firmware
- siemens scalance xc208g poe firmware
- siemens scalance xc216-4c firmware
- siemens scalance xc216-4c g \(e\/ip\) firmware
- siemens scalance xc216-4c g eec firmware
- siemens scalance xc216-4c g firmware
- siemens scalance xc216 firmware
- siemens scalance xc216eec firmware
- siemens scalance xc224-4c g \(e\/ip\) firmware
- siemens scalance xc224-4c g firmware
- siemens scalance xc224-4c g eec firmware
- siemens scalance xc224 firmware
- siemens scalance xf201-3p irt firmware
- siemens scalance xf202-2p irt firmware
- siemens scalance xf204-2 firmware
- siemens scalance xf204-2ba dna firmware
- siemens scalance xf204-2ba irt firmware
- siemens scalance xf204 dna firmware
- siemens scalance xf204 firmware
- siemens scalance xf204irt firmware
- siemens scalance xf206-1 firmware
- siemens scalance xf208 firmware
- siemens scalance xp208 \(eip\) firmware
- siemens scalance xp208 firmware
- siemens scalance xp208eec firmware
- siemens scalance xp208poe eec firmware
- siemens scalance xp216 \(eip\) firmware
- siemens scalance xp216 firmware
- siemens scalance xp216eec firmware
- siemens scalance xp216poe eec firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-15799 is a medium vulnerability (CVSS 6.5) in Siemens Scalance X-200 Switch Family (incl. Siplus Net Variants), published January 12, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. No source names a fixed version.