CVE-2023-29054
Full vulnerability record from the local CVENow database.
Description
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SIPLUS NET SCALANCE X202-2P IRT (All versions < V5.5.2). The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.
Severity
HIGH
CVSS score
7.4
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2023-04-11 10:15:18.517000
Last modified
2026-10-23 23:10:00.157000
View original CVE JSON
{
"id": "CVE-2023-29054",
"sourceIdentifier": "[email protected]",
"published": "2023-04-11T10:15:18.517",
"lastModified": "2026-10-23T23:10:00.157",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SIPLUS NET SCALANCE X202-2P IRT (All versions < V5.5.2). The SSH server on affected devices is configured to offer weak ciphers by default.\r\n\r\nThis could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data\r\npassed over the connection between legitimate clients and the affected device."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en SCALANCE X200-4P IRT (Todas las versiones anteriores a V5.5.2), SCALANCE X201-3P IRT (Todas las versiones anteriores a V5.5.2), SCALANCE X201-3P IRT PRO (Todas las versiones anteriores a V5.5.2), SCALANCE X202-2IRT (Todas las versiones anteriores a V5.5.2), SCALANCE X202-2IRT (Todas las versiones anteriores a V5.5.2), SCALANCE X202-2P IRT (Todas las versiones anteriores a V5.5.2), SCALANCE X202-2P IRT PRO (Todas las versiones anteriores a V5.5.2), SCALANCE X204IRT (Todas las versiones anteriores a V5.5.2), SCALANCE X204IRT (Todas las versiones anteriores a V5.5.2), SCALANCE X204IRT PRO (Todas las versiones anteriores a V5.5.2), SCALANCE XF201-3P IRT (Todas las versiones anteriores a V5.5.2), SCALANCE XF202-2P IRT (Todas las versiones anteriores a V5.5.2), SCALANCE XF204-2BA IRT (Todas las versiones anteriores a V5.5.2), SCALANCE XF204IRT (Todas las versiones anteriores a V5.5.2), SIPLUS NET SCALANCE X202-2P IRT (Todas las versiones anteriores a V5.5.2). El servidor SSH en los dispositivos afectados está configurado para ofrecer cifrados débiles por defecto.\n\nEsto podría permitir a un atacante no autorizado en una posición de man-in-the-middle leer y modificar cualquier dato transmitido a través de la conexión entre clientes legítimos y el dispositivo afectado."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Siemens",
"product": "SCALANCE X200-4P IRT",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X201-3P IRT",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X201-3P IRT PRO",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X202-2IRT",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X202-2IRT",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X202-2P IRT",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X202-2P IRT PRO",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X204IRT",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X204IRT",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X204IRT PRO",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XF201-3P IRT",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XF202-2P IRT",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XF204-2BA IRT",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE XF204IRT",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SIPLUS NET SCALANCE X202-2P IRT",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V5.5.2",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.5
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.2,
"impactScore": 5.2
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-02-07T16:49:12.465183Z",
"id": "CVE-2023-29054",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-326"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_x200-4p_irt_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "22AB35F0-99D8-4E09-B76B-5CEA0F2916D5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_x200-4p_irt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8B9CBC72-92D9-4B3A-884F-33124C457016"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "04EC0D48-53B2-42B4-B008-976664B31161"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_x201-3p_irt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3268CF75-6DAB-416A-B19B-2A8F95C268CF"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "72870433-6CC1-4574-B8E4-A456A348A6C1"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "492E8AC1-338B-4AC3-90C7-1FADCD4528C4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_x202-2irt_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "D2177B7B-099A-40E5-BA2F-C7CB4DAA7EEA"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_x202-2irt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A8B1D979-038F-42F4-AB7D-E0664D051B4E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_x202-2irt_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "D2177B7B-099A-40E5-BA2F-C7CB4DAA7EEA"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_x202-2irt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A8B1D979-038F-42F4-AB7D-E0664D051B4E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "799E0913-E071-4136-96F0-27FF40FD7D22"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_x202-2p_irt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CEB62730-E759-455A-A308-F9DB084B35B5"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "C3C17B6E-FE1B-4A56-89C2-6B1060B09139"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F4726901-34BF-4F70-80A6-71648A4A29FB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_x204irt_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "9D66C306-B0E0-4000-AD3C-80E20E538726"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_x204irt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6716DCDE-BD3F-4BA2-A66A-A0C14C6A3C15"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_x204irt_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "9D66C306-B0E0-4000-AD3C-80E20E538726"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_x204irt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6716DCDE-BD3F-4BA2-A66A-A0C14C6A3C15"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_x204irt_pro_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "F812AD70-3AEB-4F35-B8B1-C0D76AE1C1D8"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_x204irt_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1769DB7A-F832-4D89-8ED0-8677F750059D"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "6835BD4D-2EE0-4484-A5F1-6B4C472F2C57"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_xf201-3p_irt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "41614C70-97B4-44C8-A441-530A413A26F9"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "6E5244AF-43E2-4A2B-AD60-4F54394D636D"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_xf202-2p_irt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6751FB7D-C72C-4321-B535-5880FE696FC3"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "71460FAA-58B5-44BD-8C3F-85919D4ADDEB"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "99E6AFAA-B903-47BB-B0F3-7650B039C0FB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:scalance_xf204irt_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "5917B7D6-894F-487D-8CD5-12542CC6693A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:scalance_xf204irt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "57E5489B-277A-4D02-B4AB-4DB65969EED2"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:siplus_net_scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.5.2",
"matchCriteriaId": "B0D2E73C-B605-4DD3-AD04-85CF154E95A1"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:siplus_net_scalance_x202-2p_irt:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1C3504F0-D0F4-4106-824E-A87E46DADC3B"
}
]
}
]
}
],
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-479249.pdf",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-479249.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}