{"id":"CVE-2020-15799","aliases":["EUVD-2020-7782","GHSA-2jjq-jgq8-2h5h"],"status":"published","title":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...","description":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions \u003c V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01093,"percentile":0.65717,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2021-01-12T20:18:33Z","modified":"2026-06-17T02:57:12Z","products":[{"vendor":"siemens","product":"scalance x-200 switch family (incl. siplus net variants)"},{"vendor":"siemens","product":"scalance x-200irt switch family (incl. siplus net variants)"},{"vendor":"siemens","product":"scalance_x200-4pirt_firmware"},{"vendor":"siemens","product":"scalance_x201-3pirt_firmware"},{"vendor":"siemens","product":"scalance_x202-2irt_firmware"},{"vendor":"siemens","product":"scalance_x202-2pirt_firmware"},{"vendor":"siemens","product":"scalance_x202-2pirt_siplus_net_firmware"},{"vendor":"siemens","product":"scalance_x204irt_firmware"},{"vendor":"siemens","product":"scalance_x307-3_firmware"},{"vendor":"siemens","product":"scalance_x307-3ld_firmware"},{"vendor":"siemens","product":"scalance_x308-2_firmware"},{"vendor":"siemens","product":"scalance_x308-2ld_firmware"},{"vendor":"siemens","product":"scalance_x308-2lh\\+_firmware"},{"vendor":"siemens","product":"scalance_x308-2lh_firmware"},{"vendor":"siemens","product":"scalance_x308-2m_firmware"},{"vendor":"siemens","product":"scalance_x308-2m_ts_firmware"},{"vendor":"siemens","product":"scalance_x310_firmware"},{"vendor":"siemens","product":"scalance_x310fe_firmware"},{"vendor":"siemens","product":"scalance_x320-1fe_firmware"},{"vendor":"siemens","product":"scalance_x320-3ldfe_firmware"},{"vendor":"siemens","product":"scalance_xb205-3_firmware"},{"vendor":"siemens","product":"scalance_xb205-3ld_firmware"},{"vendor":"siemens","product":"scalance_xb208_firmware"},{"vendor":"siemens","product":"scalance_xb213-3_firmware"},{"vendor":"siemens","product":"scalance_xb213-3ld_firmware"},{"vendor":"siemens","product":"scalance_xb216_firmware"},{"vendor":"siemens","product":"scalance_xc206-2_firmware"},{"vendor":"siemens","product":"scalance_xc206-2g_poe__firmware"},{"vendor":"siemens","product":"scalance_xc206-2g_poe_eec_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_eec_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_g_firmware"},{"vendor":"siemens","product":"scalance_xc208_firmware"},{"vendor":"siemens","product":"scalance_xc208eec_firmware"},{"vendor":"siemens","product":"scalance_xc208g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc208g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc208g_firmware"},{"vendor":"siemens","product":"scalance_xc208g_poe_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_g_firmware"},{"vendor":"siemens","product":"scalance_xc216_firmware"},{"vendor":"siemens","product":"scalance_xc216eec_firmware"},{"vendor":"siemens","product":"scalance_xc224-4c_g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc224-4c_g__firmware"},{"vendor":"siemens","product":"scalance_xc224-4c_g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc224__firmware"},{"vendor":"siemens","product":"scalance_xf201-3p_irt_firmware"},{"vendor":"siemens","product":"scalance_xf202-2p_irt_firmware"},{"vendor":"siemens","product":"scalance_xf204-2_firmware"},{"vendor":"siemens","product":"scalance_xf204-2ba_dna_firmware"},{"vendor":"siemens","product":"scalance_xf204-2ba_irt_firmware"},{"vendor":"siemens","product":"scalance_xf204_dna_firmware"},{"vendor":"siemens","product":"scalance_xf204_firmware"},{"vendor":"siemens","product":"scalance_xf204irt_firmware"},{"vendor":"siemens","product":"scalance_xf206-1_firmware"},{"vendor":"siemens","product":"scalance_xf208_firmware"},{"vendor":"siemens","product":"scalance_xp208_\\(eip\\)_firmware"},{"vendor":"siemens","product":"scalance_xp208_firmware"},{"vendor":"siemens","product":"scalance_xp208eec_firmware"},{"vendor":"siemens","product":"scalance_xp208poe_eec_firmware"},{"vendor":"siemens","product":"scalance_xp216_\\(eip\\)_firmware"},{"vendor":"siemens","product":"scalance_xp216_firmware"},{"vendor":"siemens","product":"scalance_xp216eec_firmware"},{"vendor":"siemens","product":"scalance_xp216poe_eec_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15799"},{"url":"https://github.com/advisories/GHSA-2jjq-jgq8-2h5h"}],"sources":{"cve":[{"id":"CVE-2020-15799","description":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions \u003c V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.","status":"published","published":"2021-01-12T20:18:33Z","modified":"2024-08-04T13:30:21.812Z","cwes":["CWE-306"],"updated_at":"2026-11-02T14:35:50.228781Z"}],"euvd":[{"id":"EUVD-2020-7782","description":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions \u003c V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.","status":"published","published":"2021-01-12T20:18:33Z","modified":"2024-08-04T13:30:21Z","updated_at":"2026-11-03T03:07:30.36726Z"}],"ghsa":[{"id":"GHSA-2jjq-jgq8-2h5h","title":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...","description":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.","status":"published","published":"2022-05-24T17:38:29Z","modified":"2023-01-27T05:03:11Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:42:11.230183Z"}],"nvd":[{"id":"CVE-2020-15799","description":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions \u003c V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.","status":"published","published":"2021-01-12T21:15:16.37Z","modified":"2026-06-17T02:57:12.863Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":7.1,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:06:28.892872Z"}]}}