ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-28395

—
CVSS 3.1
5.9 medium
EPSS
1%p66
Published
()
Modified
Description

A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). Devices do not create a new unique private key after factory reset. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.

Vendors
siemens
Products
scalance xr324-12m firmware, scalance xr324-12m ts firmware, scalance xr324-4m eec firmware, scalance xr324-4m poe firmware, scalance xr324-4m poe ts firmware, scalance xr324wg firmware, scalance xr326-2c poe wg firmware, scalance xr328-4c wg firmware
Weakness
CWE-321, CWE-798
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

No ingested article mentions this CVE yet.