Read the docs
TI-2020-17222 Aliases CVE-2020-28393GHSA-q5c9-w6w2-m4fw

An unauthenticated remote attacker could create a permanent denial-of-service condition…

Priority LOW 36CWE-682Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).

Why it matters now

EPSS 0.01629 76th percentileScored 2026-11-07
Fix Fixed SCALANCE XM-400, XR-500: v6.4

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—SCALANCE XM-400, XR-500before v6.4v6.4Patch availableCNA
  • SCALANCE XM-400, XR-500 Vendor— Affected before v6.4 Fixed in v6.4 Patch available CNA

CPE configurations NVD · 22

CPEVersionsRoleVendor
cpe:2.3:o:siemens:scalance_xm-400_firmware:*:*:*:*:*:*:*:*before 6.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xm-400:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr524_firmware:*:*:*:*:*:*:*:*before 6.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr524:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr526_firmware:*:*:*:*:*:*:*:*before 6.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr526:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr528_firmware:*:*:*:*:*:*:*:*before 6.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr528:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr552_firmware:*:*:*:*:*:*:*:*before 6.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr552:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:scalance_xm-400_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xm-400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr524_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr524:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr526_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr526:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr528_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr528:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr552_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr552:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 12 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:siemens:scalance_xm416-4c_firmware:*:*:*:*:*:*:*:*before 6.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xm416-4c:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xm408-8c_firmware:*:*:*:*:*:*:*:*before 6.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xm408-8c:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xm408-4c_firmware:*:*:*:*:*:*:*:*before 6.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xm408-4c:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xm416-4c_l3_firmware:*:*:*:*:*:*:*:*before 6.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xm416-4c_l3:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xm408-8c_l3_firmware:*:*:*:*:*:*:*:*before 6.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xm408-8c_l3:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xm408-4c_l3_firmware:*:*:*:*:*:*:*:*before 6.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xm408-4c_l3:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:scalance_xm416-4c_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xm416-4c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xm408-8c_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xm408-8c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xm408-4c_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xm408-4c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xm416-4c_l3_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xm416-4c_l3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xm408-8c_l3_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xm408-8c_l3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xm408-4c_l3_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xm408-4c_l3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

  • Fix · CNA SCALANCE XM-400, XR-500 Fixed in v6.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-28393
  2. 2026-10-03 Alias added: GHSA-q5c9-w6w2-m4fw

References

Advisory 2

  • TI-2021-02413 NULL pointer deref in signature_algorithms processing CVSS 3.1MEDIUM 5.9
  • TI-2019-10399 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 3.1HIGH 7.5
  • TI-2017-09441 After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to… CVSS 3.1HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences