CVE-2020-28395

Severity: medium (CVSS 5.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-12 · updated 2026-06-17
Weakness: CWE-321

Description

A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). Devices do not create a new unique private key after factory reset. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.

Affected products

Siemens Scalance Xr324-12M Firmware: before 4.1.0 — fixed in 4.1.0
Siemens Scalance Xr324-12M Ts Firmware: before 4.1.0 — fixed in 4.1.0
Siemens Scalance Xr324-4M Eec Firmware: before 4.1.0 — fixed in 4.1.0
Siemens Scalance Xr324-4M Poe Firmware: before 4.1.0 — fixed in 4.1.0
Siemens Scalance Xr324-4M Poe Ts Firmware: before 4.1.0 — fixed in 4.1.0
Siemens Scalance Xr324Wg Firmware: before 4.1.0 — fixed in 4.1.0
Siemens Scalance Xr326-2C Poe Wg Firmware: before 4.1.0 — fixed in 4.1.0
Siemens Scalance Xr328-4C Wg Firmware: before 4.1.0 — fixed in 4.1.0

How to fix

Upgrade to a fixed version: Siemens Scalance Xr324-12M Firmware 4.1.0; Siemens Scalance Xr324-12M Ts Firmware 4.1.0; Siemens Scalance Xr324-4M Eec Firmware 4.1.0; Siemens Scalance Xr324-4M Poe Firmware 4.1.0; Siemens Scalance Xr324-4M Poe Ts Firmware 4.1.0; Siemens Scalance Xr324Wg Firmware 4.1.0; Siemens Scalance Xr326-2C Poe Wg Firmware 4.1.0; Siemens Scalance Xr328-4C Wg Firmware 4.1.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-28395 or the next vulnerability affects your stack