{"id":"CVE-2020-15800","aliases":["EUVD-2020-7783","GHSA-g2fr-hgr5-r3hq"],"status":"published","title":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...","description":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions \u003c V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions \u003c V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01672,"percentile":0.77011,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-122","CWE-787"],"published":"2021-01-12T20:18:33Z","modified":"2026-06-17T02:57:13Z","products":[{"vendor":"siemens","product":"scalance x-200 switch family (incl. siplus net variants)"},{"vendor":"siemens","product":"scalance x-200irt switch family (incl. siplus net variants)"},{"vendor":"siemens","product":"scalance x-300 switch family (incl. x408 and siplus net variants)"},{"vendor":"siemens","product":"scalance_x200-4pirt_firmware"},{"vendor":"siemens","product":"scalance_x201-3pirt_firmware"},{"vendor":"siemens","product":"scalance_x202-2irt_firmware"},{"vendor":"siemens","product":"scalance_x202-2pirt_firmware"},{"vendor":"siemens","product":"scalance_x202-2pirt_siplus_net_firmware"},{"vendor":"siemens","product":"scalance_x204irt_firmware"},{"vendor":"siemens","product":"scalance_x307-3_firmware"},{"vendor":"siemens","product":"scalance_x307-3ld_firmware"},{"vendor":"siemens","product":"scalance_x308-2_firmware"},{"vendor":"siemens","product":"scalance_x308-2ld_firmware"},{"vendor":"siemens","product":"scalance_x308-2lh\\+_firmware"},{"vendor":"siemens","product":"scalance_x308-2lh_firmware"},{"vendor":"siemens","product":"scalance_x308-2m_firmware"},{"vendor":"siemens","product":"scalance_x308-2m_ts_firmware"},{"vendor":"siemens","product":"scalance_x310_firmware"},{"vendor":"siemens","product":"scalance_x310fe_firmware"},{"vendor":"siemens","product":"scalance_x320-1fe_firmware"},{"vendor":"siemens","product":"scalance_x320-3ldfe_firmware"},{"vendor":"siemens","product":"scalance_xb205-3_firmware"},{"vendor":"siemens","product":"scalance_xb205-3ld_firmware"},{"vendor":"siemens","product":"scalance_xb208_firmware"},{"vendor":"siemens","product":"scalance_xb213-3_firmware"},{"vendor":"siemens","product":"scalance_xb213-3ld_firmware"},{"vendor":"siemens","product":"scalance_xb216_firmware"},{"vendor":"siemens","product":"scalance_xc206-2_firmware"},{"vendor":"siemens","product":"scalance_xc206-2g_poe__firmware"},{"vendor":"siemens","product":"scalance_xc206-2g_poe_eec_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_eec_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_g_firmware"},{"vendor":"siemens","product":"scalance_xc208_firmware"},{"vendor":"siemens","product":"scalance_xc208eec_firmware"},{"vendor":"siemens","product":"scalance_xc208g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc208g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc208g_firmware"},{"vendor":"siemens","product":"scalance_xc208g_poe_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_g_firmware"},{"vendor":"siemens","product":"scalance_xc216_firmware"},{"vendor":"siemens","product":"scalance_xc216eec_firmware"},{"vendor":"siemens","product":"scalance_xc224-4c_g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc224-4c_g__firmware"},{"vendor":"siemens","product":"scalance_xc224-4c_g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc224__firmware"},{"vendor":"siemens","product":"scalance_xf201-3p_irt_firmware"},{"vendor":"siemens","product":"scalance_xf202-2p_irt_firmware"},{"vendor":"siemens","product":"scalance_xf204-2_firmware"},{"vendor":"siemens","product":"scalance_xf204-2ba_dna_firmware"},{"vendor":"siemens","product":"scalance_xf204-2ba_irt_firmware"},{"vendor":"siemens","product":"scalance_xf204_dna_firmware"},{"vendor":"siemens","product":"scalance_xf204_firmware"},{"vendor":"siemens","product":"scalance_xf204irt_firmware"},{"vendor":"siemens","product":"scalance_xf206-1_firmware"},{"vendor":"siemens","product":"scalance_xf208_firmware"},{"vendor":"siemens","product":"scalance_xp208_\\(eip\\)_firmware"},{"vendor":"siemens","product":"scalance_xp208_firmware"},{"vendor":"siemens","product":"scalance_xp208eec_firmware"},{"vendor":"siemens","product":"scalance_xp208poe_eec_firmware"},{"vendor":"siemens","product":"scalance_xp216_\\(eip\\)_firmware"},{"vendor":"siemens","product":"scalance_xp216_firmware"},{"vendor":"siemens","product":"scalance_xp216eec_firmware"},{"vendor":"siemens","product":"scalance_xp216poe_eec_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15800"},{"url":"https://github.com/advisories/GHSA-g2fr-hgr5-r3hq"}],"sources":{"cve":[{"id":"CVE-2020-15800","description":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions \u003c V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions \u003c V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.","status":"published","published":"2021-01-12T20:18:33Z","modified":"2024-08-04T13:30:21.877Z","cwes":["CWE-122"],"updated_at":"2026-11-02T14:35:50.228781Z"}],"euvd":[{"id":"EUVD-2020-7783","description":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions \u003c V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions \u003c V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.","status":"published","published":"2021-01-12T20:18:33Z","modified":"2024-08-04T13:30:21Z","updated_at":"2026-11-03T03:07:30.36726Z"}],"ghsa":[{"id":"GHSA-g2fr-hgr5-r3hq","title":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...","description":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions \u003c V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.","status":"published","published":"2022-05-24T17:38:29Z","modified":"2023-01-27T05:02:33Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:42:04.146384Z"}],"nvd":[{"id":"CVE-2020-15800","description":"A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions \u003c V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions \u003c V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.","status":"published","published":"2021-01-12T21:15:16.48Z","modified":"2026-06-17T02:57:13.033Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:06:28.892872Z"}]}}