CyberSecBulletin
CVE-2023-29054NVD status: Modified

SCALANCE X200-4P IRT: Inadequate Encryption Strength

Published Updated By the CyberSecBulletin desk

CVE-2023-29054 is a high-severity inadequate encryption strength vulnerability in SCALANCE X200-4P IRT from Siemens, with a CVSS 3.1 base score of 7.4 out of 10. It can be exploited remotely over the network by an unauthenticated attacker, without any action from a user. Affected SCALANCE X200-4P IRT versions: All versions < V5.5.2. The record does not name a fixed version, so check the vendor advisory. There is no confirmed exploitation so far. EPSS estimates a 0.26% chance of exploitation within 30 days, which is low compared with other CVEs.

Next patch cycle

High severity with no evidence of exploitation so far.

What to do

  1. Update Scalance X200-4p Irt Firmware to 5.5.2 or a later version.
  2. Update Scalance X201-3p Irt Firmware to 5.5.2 or a later version.
  3. Update Scalance X201-3p Irt Pro Firmware to 5.5.2 or a later version.
  4. Read the advisory on cert-portal.siemens.com for workarounds and exact fixed builds.
  5. Until you can update, restrict network access to the affected service so it is not reachable from untrusted networks.

Affected products and versions

VendorProductAffected versionsFixed in
SiemensSCALANCE X200-4P IRTAll versions < V5.5.2Not stated
SiemensSCALANCE X201-3P IRTAll versions < V5.5.2Not stated
SiemensSCALANCE X201-3P IRT PROAll versions < V5.5.2Not stated
SiemensSCALANCE X202-2IRTAll versions < V5.5.2Not stated
SiemensSCALANCE X202-2P IRTAll versions < V5.5.2Not stated
SiemensSCALANCE X202-2P IRT PROAll versions < V5.5.2Not stated
SiemensSCALANCE X204IRTAll versions < V5.5.2Not stated
SiemensSCALANCE X204IRT PROAll versions < V5.5.2Not stated
SiemensSCALANCE XF201-3P IRTAll versions < V5.5.2Not stated
SiemensSCALANCE XF202-2P IRTAll versions < V5.5.2Not stated
SiemensSCALANCE XF204-2BA IRTAll versions < V5.5.2Not stated
SiemensSCALANCE XF204IRTAll versions < V5.5.2Not stated
SiemensSIPLUS NET SCALANCE X202-2P IRTAll versions < V5.5.2Not stated
SiemensScalance X200-4p Irt Firmwarebefore 5.5.25.5.2
SiemensScalance X201-3p Irt Firmwarebefore 5.5.25.5.2
SiemensScalance X201-3p Irt Pro Firmwarebefore 5.5.25.5.2
SiemensScalance X202-2irt Firmwarebefore 5.5.25.5.2
SiemensScalance X202-2p Irt Firmwarebefore 5.5.25.5.2
SiemensScalance X202-2p Irt Pro Firmwarebefore 5.5.25.5.2
SiemensScalance X204irt Firmwarebefore 5.5.25.5.2
SiemensScalance X204irt Pro Firmwarebefore 5.5.25.5.2
SiemensScalance Xf201-3p Irt Firmwarebefore 5.5.25.5.2
SiemensScalance Xf202-2p Irt Firmwarebefore 5.5.25.5.2
SiemensScalance Xf204-2ba Irt Firmwarebefore 5.5.25.5.2
SiemensScalance Xf204irt Firmwarebefore 5.5.25.5.2

Version data comes from the organisation that assigned the CVE; 1 further products are omitted here. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector
NetworkCan be exploited remotely over a network, including the internet.
Attack complexity
HighSuccess depends on conditions outside the attacker's control.
Privileges required
NoneNo account or login is needed.
User interaction
NoneNo action by a victim is required.
Scope
UnchangedImpact stays within the vulnerable component.
Confidentiality
HighAll data handled by the component can be read.
Integrity
HighData or code can be modified at will.
Availability
NoneAvailability is not affected.

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N. Scored by NVD.

Scoring systemScoreSeverityScored by
CVSS 3.16.7MediumCNA (siemens.com)
CVSS 3.17.4HighNVD

Official description

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SIPLUS NET SCALANCE X202-2P IRT (All versions < V5.5.2). The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

How developers prevent this class of flaw

  • Use an encryption scheme that is currently considered to be strong by experts in the field.

More Inadequate Encryption Strength vulnerabilities (CWE-326)

Timeline

  1. CVE record published.
  2. CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: partial).
  3. Record last changed materially (score, affected products, status or references).

References

Other vulnerabilities in SCALANCE X200-4P IRT

All SCALANCE X200-4P IRT vulnerabilities

Recent Inadequate Encryption Strength vulnerabilities

Spotted an error? Tell us.