← Back to home
ICSA-22-349-02  ·  Published 2022-12-13  ·  View on CISA ICS-CERT ↗

Siemens SCALANCE X-200RNA Switch Devices

CVSS 8.8 HIGH

CVEs (6)

Remediations

  • Restrict access to the affected systems, especially to ports 22/tcp, 80/tcp, 443/tcp and 161/udp to trusted IP addresses only
  • Disable the SNMP service if not required, and if disabling is supported by the product
  • Deactivate the web server if not required, and if deactivation is supported by the product
  • Update to V3.2.7 or later version

Affected Vendors

Siemens

Affected Products (5)

Siemens · SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2) <V3.2.7
Siemens · SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2) <V3.2.7
Siemens · SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3) <V3.2.7
Siemens · SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3) <V3.2.7
Siemens · SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3) <V3.2.7

Affected Sectors

Multiple

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more