ICSA-21-103-07
·
Published 2025-05-06
·
View on CISA ICS-CERT ↗
Siemens Web Server of SCALANCE X200 (Update A)
CVSS 9.8
CRITICAL
CVEs (2)
Remediations
- Update to V5.5.1 or later version
- Update to V5.2.5 or later version
- Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
Affected Vendors
Siemens
Affected Products (29)
Siemens
·
SCALANCE X200-4P IRT
<5.5.1
Siemens
·
SCALANCE X201-3P IRT
<5.5.1
Siemens
·
SCALANCE X201-3P IRT PRO
<5.5.1
Siemens
·
SCALANCE X202-2 IRT
<5.5.1
Siemens
·
SCALANCE X202-2P IRT (incl. SIPLUS NET variant)
<5.5.1
Siemens
·
SCALANCE X202-2P IRT PRO
<5.5.1
Siemens
·
SCALANCE X204 IRT
<5.5.1
Siemens
·
SCALANCE X204 IRT PRO
<5.5.1
Siemens
·
SCALANCE X204-2 (incl. SIPLUS NET variant)
<V5.2.5
Siemens
·
SCALANCE X204-2FM
<V5.2.5
Siemens
·
SCALANCE X204-2LD (incl. SIPLUS NET variant)
<V5.2.5
Siemens
·
SCALANCE X204-2LD TS
<V5.2.5
Siemens
·
SCALANCE X204-2TS
<V5.2.5
Siemens
·
SCALANCE X206-1
<V5.2.5
Siemens
·
SCALANCE X206-1LD
<V5.2.5
Siemens
·
SCALANCE X208 (incl. SIPLUS NET variant)
<V5.2.5
Siemens
·
SCALANCE X208PRO
<V5.2.5
Siemens
·
SCALANCE X212-2 (incl. SIPLUS NET variant)
<V5.2.5
Siemens
·
SCALANCE X212-2LD
<V5.2.5
Siemens
·
SCALANCE X216
<V5.2.5
Siemens
·
SCALANCE X224
<V5.2.5
Siemens
·
SCALANCE XF201-3P IRT
<5.5.1
Siemens
·
SCALANCE XF202-2P IRT
<5.5.1
Siemens
·
SCALANCE XF204
<V5.2.5
Siemens
·
SCALANCE XF204 IRT
<5.5.1
Siemens
·
SCALANCE XF204-2 (incl. SIPLUS NET variant)
<V5.2.5
Siemens
·
SCALANCE XF204-2BA IRT
<5.5.1
Siemens
·
SCALANCE XF206-1
<V5.2.5
Siemens
·
SCALANCE XF208
<V5.2.5
Affected Sectors
Multiple
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more