Buffer overflow in Siemens SCALANCE X200-4P IRT
Priority MEDIUM 46CWE-120Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.
Summary
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204-2 (All versions < V5.2.6), SCALANCE X204-2FM (All versions < V5.2.6), SCALANCE X204-2LD (All versions < V5.2.6), SCALANCE X204-2LD TS (All versions < V5.2.6), SCALANCE X204-2TS (All versions < V5.2.6), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE X206-1 (All versions < V5.2.6), SCALANCE X206-1LD (All versions < V5.2.6), SCALANCE X208 (All versions < V5.2.6), SCALANCE X208PRO (All versions < V5.2.6), SCALANCE X212-2 (All versions < V5.2.6), SCALANCE X212-2LD (All versions < V5.2.6), SCALANCE X216 (All versions < V5.2.6), SCALANCE X224 (All versions < V5.2.6), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204 (All versions < V5.2.6), SCALANCE XF204-2 (All versions < V5.2.6), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SCALANCE XF206-1 (All versions < V5.2.6), SCALANCE XF208 (All versions < V5.2.6). Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01364 71st percentileScored 2026-11-07
Fix Fixed SCALANCE X200-4P IRT (Siemens): V5.5.2SCALANCE X201-3P IRT (Siemens): V5.5.2+27 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SCALANCE X200-4P IRT | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE X201-3P IRT | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE X201-3P IRT PRO | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE X202-2IRT | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE X202-2IRT | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE X202-2P IRT | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE X202-2P IRT PRO | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE X204-2 | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE X204-2FM | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE X204-2LD | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE X204-2LD TS | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE X204-2TS | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE X204IRT | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE X204IRT | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE X204IRT PRO | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE X206-1 | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE X206-1LD | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE X208 | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE X208PRO | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE X212-2 | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE X212-2LD | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE X216 | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE X224 | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE XF201-3P IRT | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE XF202-2P IRT | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE XF204 | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE XF204-2 | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE XF204-2BA IRT | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE XF204IRT | before V5.5.2 | V5.5.2 | Patch available | CNA |
| Siemens | SCALANCE XF206-1 | before V5.2.6 | V5.2.6 | Patch available | CNA |
| Siemens | SCALANCE XF208 | before V5.2.6 | V5.2.6 | Patch available | CNA |
- SCALANCE X200-4P IRT VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE X201-3P IRT VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE X201-3P IRT PRO VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE X202-2IRT VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE X202-2IRT VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE X202-2P IRT VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE X202-2P IRT PRO VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE X204-2 VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE X204-2FM VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE X204-2LD VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE X204-2LD TS VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE X204-2TS VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE X204IRT VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE X204IRT VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE X204IRT PRO VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE X206-1 VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE X206-1LD VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE X208 VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE X208PRO VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE X212-2 VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE X212-2LD VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE X216 VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE X224 VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE XF201-3P IRT VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE XF202-2P IRT VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE XF204 VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE XF204-2 VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE XF204-2BA IRT VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE XF204IRT VendorSiemens Affected before V5.5.2 Fixed in V5.5.2 Patch available CNA
- SCALANCE XF206-1 VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
- SCALANCE XF208 VendorSiemens Affected before V5.2.6 Fixed in V5.2.6 Patch available CNA
CPE configurations NVD · 58
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_x204-2_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x204-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x204-2fm_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x204-2fm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x204-2ld_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x204-2ld:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x204-2ld_ts_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x204-2ld_ts:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x204-2ts_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x204-2ts:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_x204-2_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x204-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x204-2fm_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x204-2fm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x204-2ld_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x204-2ld:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x204-2ld_ts_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x204-2ld_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x204-2ts_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x204-2ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 48 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_x206-1_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x206-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x206-1ld_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x206-1ld:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x208_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x208:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x208_pro_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x208_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x212-2_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x212-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x212-2ld_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x212-2ld:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x216_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x216:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x224_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x224:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xf204_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xf204:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xf204-2_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xf204-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xf206-1_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xf206-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xf208_firmware:*:*:*:*:*:*:*:* | before 5.2.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xf208:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x200-4p_irt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x200-4p_irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x201-3p_irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x202-2irt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x202-2irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x202-2p_irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x204irt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x204irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x204irt_pro_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x204irt_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xf201-3p_irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xf202-2p_irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xf204irt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xf204irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_x206-1_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x206-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x206-1ld_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x206-1ld:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x208_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x208:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x208_pro_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x208_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x212-2_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x212-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x212-2ld_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x212-2ld:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x216_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x216:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x224_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x224:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xf204_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xf204:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xf204-2_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xf204-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xf206-1_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xf206-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xf208_firmware:*:*:*:*:*:*:*:* Versions before 5.2.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xf208:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x200-4p_irt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x200-4p_irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x201-3p_irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x202-2irt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x202-2irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x202-2p_irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x204irt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x204irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x204irt_pro_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x204irt_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xf201-3p_irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xf202-2p_irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xf204irt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xf204irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SCALANCE X200-4P IRT (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE X201-3P IRT (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE X201-3P IRT PRO (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE X202-2IRT (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE X202-2IRT (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE X202-2P IRT (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE X202-2P IRT PRO (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE X204-2 (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE X204-2FM (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE X204-2LD (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE X204-2LD TS (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE X204-2TS (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE X204IRT (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE X204IRT (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE X204IRT PRO (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE X206-1 (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE X206-1LD (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE X208 (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE X208PRO (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE X212-2 (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE X212-2LD (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE X216 (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE X224 (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE XF201-3P IRT (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE XF202-2P IRT (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE XF204 (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE XF204-2 (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE XF204-2BA IRT (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE XF204IRT (Siemens) Fixed in V5.5.2
- Fix · CNA SCALANCE XF206-1 (Siemens) Fixed in V5.2.6
- Fix · CNA SCALANCE XF208 (Siemens) Fixed in V5.2.6
Timeline
- 2026-10-02 Threatist record created from CVE-2022-26649
- 2026-10-03 Alias added: GHSA-xf68-6h35-h4p2
References
More Siemens Scalance X200-4p Irt Firmware vulnerabilities
- TI-2021-07801 Stack-based buffer overflow in Siemens SCALANCE X200-4P IRT CVSS 3.1CRITICAL 9.8
- TI-2022-09921 A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2)… CVSS 3.1CRITICAL 9.8
- TI-2021-07800 Heap-based buffer overflow in Siemens SCALANCE X200-4P IRT CVSS 3.1CRITICAL 9.8
- TI-2022-09922 Buffer overflow in Siemens SCALANCE X200-4P IRT CVSS 3.1HIGH 8.2
- TI-2023-13504 A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2)… CVSS 3.1HIGH 7.4
- TI-2022-19274 Cross-site scripting in Siemens SCALANCE X200-4P IRT CVSS 3.1MEDIUM 6.1
Sources
- CVE-2022-26649 · CVE Program
- CVE-2022-26649 · NVD
- FIRST EPSS
- GHSA-xf68-6h35-h4p2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences