CVE-2020-15800
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.
- Record
CVE-2020-15800- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-122, CWE-787
- Updated
- 2026-11-02
CVE List No score
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.
- Record
CVE-2020-15800- Weakness
- CWE-122
- Updated
- 2026-11-02
EUVDEUVD-2020-7783 No score
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.
- Record
EUVD-2020-7783- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g2fr-hgr5-r3hq
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.
- Record
GHSA-g2fr-hgr5-r3hq- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-122, CWE-787
- Updated
- 2026-11-02
Affected products
- siemens scalance x-200 switch family (incl. siplus net variants)
- siemens scalance x-200irt switch family (incl. siplus net variants)
- siemens scalance x-300 switch family (incl. x408 and siplus net variants)
- siemens scalance x200-4pirt firmware
- siemens scalance x201-3pirt firmware
- siemens scalance x202-2irt firmware
- siemens scalance x202-2pirt firmware
- siemens scalance x202-2pirt siplus net firmware
- siemens scalance x204irt firmware
- siemens scalance x307-3 firmware
- siemens scalance x307-3ld firmware
- siemens scalance x308-2 firmware
Show 57 moreShow less
- siemens scalance x308-2ld firmware
- siemens scalance x308-2lh\+ firmware
- siemens scalance x308-2lh firmware
- siemens scalance x308-2m firmware
- siemens scalance x308-2m ts firmware
- siemens scalance x310 firmware
- siemens scalance x310fe firmware
- siemens scalance x320-1fe firmware
- siemens scalance x320-3ldfe firmware
- siemens scalance xb205-3 firmware
- siemens scalance xb205-3ld firmware
- siemens scalance xb208 firmware
- siemens scalance xb213-3 firmware
- siemens scalance xb213-3ld firmware
- siemens scalance xb216 firmware
- siemens scalance xc206-2 firmware
- siemens scalance xc206-2g poe firmware
- siemens scalance xc206-2g poe eec firmware
- siemens scalance xc206-2sfp eec firmware
- siemens scalance xc206-2sfp firmware
- siemens scalance xc206-2sfp g \(e\/ip\) firmware
- siemens scalance xc206-2sfp g eec firmware
- siemens scalance xc206-2sfp g firmware
- siemens scalance xc208 firmware
- siemens scalance xc208eec firmware
- siemens scalance xc208g \(e\/ip\) firmware
- siemens scalance xc208g eec firmware
- siemens scalance xc208g firmware
- siemens scalance xc208g poe firmware
- siemens scalance xc216-4c firmware
- siemens scalance xc216-4c g \(e\/ip\) firmware
- siemens scalance xc216-4c g eec firmware
- siemens scalance xc216-4c g firmware
- siemens scalance xc216 firmware
- siemens scalance xc216eec firmware
- siemens scalance xc224-4c g \(e\/ip\) firmware
- siemens scalance xc224-4c g firmware
- siemens scalance xc224-4c g eec firmware
- siemens scalance xc224 firmware
- siemens scalance xf201-3p irt firmware
- siemens scalance xf202-2p irt firmware
- siemens scalance xf204-2 firmware
- siemens scalance xf204-2ba dna firmware
- siemens scalance xf204-2ba irt firmware
- siemens scalance xf204 dna firmware
- siemens scalance xf204 firmware
- siemens scalance xf204irt firmware
- siemens scalance xf206-1 firmware
- siemens scalance xf208 firmware
- siemens scalance xp208 \(eip\) firmware
- siemens scalance xp208 firmware
- siemens scalance xp208eec firmware
- siemens scalance xp208poe eec firmware
- siemens scalance xp216 \(eip\) firmware
- siemens scalance xp216 firmware
- siemens scalance xp216eec firmware
- siemens scalance xp216poe eec firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-15800 is a critical vulnerability (CVSS 9.8) in Siemens Scalance X-200 Switch Family (incl. Siplus Net Variants), published January 12, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.67%, the 77th percentile. No source names a fixed version.