Skip to content
Fencer Vulns
medium 6.7

CVE-2023-29054 json

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE…

published 2023-04-11 3 y ago modified 2026-10-23 16 d ago also EUVD-2023-32658

cvss
6.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 17%
public exploits
0
none known

Summary

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SIPLUS NET SCALANCE X202-2P IRT (All versions < V5.5.2). The SSH server on affected devices is configured to offer weak ciphers by default.

This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.

Patch / fix

  • siemens scalance_x200-4p_irt_firmware 5.5.2
  • siemens scalance_x201-3p_irt_firmware 5.5.2
  • siemens scalance_x201-3p_irt_pro_firmware 5.5.2
  • siemens scalance_x202-2irt_firmware 5.5.2
  • siemens scalance_x202-2p_irt_firmware 5.5.2
  • siemens scalance_x202-2p_irt_pro_firmware 5.5.2
  • siemens scalance_x204irt_firmware 5.5.2
  • siemens scalance_x204irt_pro_firmware 5.5.2
  • siemens scalance_xf201-3p_irt_firmware 5.5.2
  • siemens scalance_xf202-2p_irt_firmware 5.5.2
  • siemens scalance_xf204-2ba_irt_firmware 5.5.2
  • siemens scalance_xf204irt_firmware 5.5.2
  • siemens siplus_net_scalance_x202-2p_irt_firmware 5.5.2

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-23-103-05 updated cvss 6.7

Siemens SCALANCE X-200IRT Devices

  • Siemens SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) <V5.5.2 Siemens SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3) <V5.5.2 Siemens SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6) <V5.5.2 Siemens SCALANCE X202-2IRT (6GK5202-2BB00-2BA3) <V5.5.2 Siemens SCALANCE X202-2IRT (6GK5202-2BB10-2BA3) <V5.5.2 Siemens SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3) <V5.5.2
    +9 more products
    Siemens SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6) <V5.5.2 Siemens SCALANCE X204IRT (6GK5204-0BA00-2BA3) <V5.5.2 Siemens SCALANCE X204IRT (6GK5204-0BA10-2BA3) <V5.5.2 Siemens SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6) <V5.5.2 Siemens SCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2) <V5.5.2 Siemens SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2) <V5.5.2 Siemens SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2) <V5.5.2 Siemens SCALANCE XF204IRT (6GK5204-0BA00-2BF2) <V5.5.2 Siemens SIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3) <V5.5.2
    affected: fixed in V5.5.2, workaround support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
21 mo ago

Exploit prediction

0.26% chance of exploitation in the next 30 days, higher than 17% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.7 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H/E:P/RL:U/RC:C
CNA 3.1 6.7 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H
NVD 3.1 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

  • Siemens SCALANCE X200-4P IRT
  • Siemens SCALANCE X201-3P IRT
  • Siemens SCALANCE X201-3P IRT PRO
  • Siemens SCALANCE X202-2IRT
  • Siemens SCALANCE X202-2P IRT
  • Siemens SCALANCE X202-2P IRT PRO
  • Siemens SCALANCE X204IRT
  • Siemens SCALANCE X204IRT PRO
  • Siemens SCALANCE XF201-3P IRT
  • Siemens SCALANCE XF202-2P IRT
  • Siemens SCALANCE XF204-2BA IRT
  • Siemens SCALANCE XF204IRT
  • Siemens SIPLUS NET SCALANCE X202-2P IRT

Classification

Weakness
  • CWE-326 Inadequate Encryption Strength

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.