Siemens SCALANCE XM-400 and XR-500 Devices

CVSS 7.5 HIGH

CVEs (1)

CVE-2020-28393

Update to V6.4 or later version
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled.
If OSPF is used, set a password for the OSPF interface and enable MD5 authentication

Siemens

Siemens · SCALANCE XM-400 Family <V6.4

Siemens · SCALANCE XR-500 Family <V6.4

Multiple

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.