CVE-2023-29054
Quick assessment
Affected
Siemens SCALANCE X200-4P IRT
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Siemens SCALANCE是德国西门子（Siemens）公司的一系列以太网交换机。可连接到工业控制系统 (ICS) 设备，包括可编程逻辑控制器 (PLC) 和人机界面 (HMI) 系统。 Siemens SCALANCE 存在加密问题漏洞，该漏洞源于受影响设备上的 SSH 服务器默认配置为弱密码，攻击者利用该漏洞可以读取和修改任何数据，以下产品和版本受到影响：SCALANCE X200-4P IRT（V5.5.2之前版本）、SCALANCE X201-3P IRT（V5.5.2之前版本）、SCALA
Possible ATT&CK Techniques 1 AI
T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-29054
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SIPLUS NET SCALANCE X202-2P IRT (All versions < V5.5.2). The SSH server on affected devices is configured to offer weak ciphers by default.
This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data
passed over the connection between legitimate clients and the affected device.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的加密强度
Source: CVE Program / CVE List V5
Vulnerability Title
Siemens SCALANCE 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens SCALANCE是德国西门子（Siemens）公司的一系列以太网交换机。可连接到工业控制系统 (ICS) 设备，包括可编程逻辑控制器 (PLC) 和人机界面 (HMI) 系统。 Siemens SCALANCE 存在加密问题漏洞，该漏洞源于受影响设备上的 SSH 服务器默认配置为弱密码，攻击者利用该漏洞可以读取和修改任何数据，以下产品和版本受到影响：SCALANCE X200-4P IRT（V5.5.2之前版本）、SCALANCE X201-3P IRT（V5.5.2之前版本）、SCALA
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Siemens | SCALANCE X200-4P IRT | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE X201-3P IRT | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE X201-3P IRT PRO | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE X202-2IRT | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE X202-2IRT | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE X202-2P IRT | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE X202-2P IRT PRO | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE X204IRT | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE X204IRT | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE X204IRT PRO | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE XF201-3P IRT | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE XF202-2P IRT | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE XF204-2BA IRT | All versions < V5.5.2 | - |
|
| Siemens | SCALANCE XF204IRT | All versions < V5.5.2 | - |
|
| Siemens | SIPLUS NET SCALANCE X202-2P IRT | All versions < V5.5.2 | - |
|
II. Public POCs for CVE-2023-29054
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-29054
请登录查看更多情报信息。
Vendor Advisories for CVE-2023-29054 (1)
Same Patch Batch · Siemens · 2023-04-11 · 11 CVEs total
| CVE-2023-28489 | 9.8 CRITICAL | Siemens SICAM A8000 命令注入漏洞 |
| CVE-2023-29053 | 7.8 HIGH | Siemens JT Open Toolkit 缓冲区错误漏洞 |
| CVE-2023-28766 | 7.5 HIGH | Siemens SIPROTEC 5 代码问题漏洞 |
| CVE-2022-43768 | 7.5 HIGH | Siemens SIMATIC CP443-1 OPC UA9 安全漏洞 |
| CVE-2022-43767 | 7.5 HIGH | Siemens SIMATIC CP443-1 OPC UA9 安全漏洞 |
| CVE-2022-43716 | 7.5 HIGH | Siemens SIMATIC CP443-1 OPC UA9 资源管理错误漏洞 |
| CVE-2023-26293 | 7.3 HIGH | Siemens TIA Portal 输入验证错误漏洞 |
| CVE-2023-23588 | 6.2 MEDIUM | Siemens SIMATIC IPC DiagMonitor 信任管理问题漏洞 |
| CVE-2023-28828 | 5.9 MEDIUM | Siemens Polarion 代码问题漏洞 |
| CVE-2023-27464 | 5.3 MEDIUM | Siemens Mendix 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-326
-
CVE-2026-77405
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Co -
CVE-2023-54356
Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites -
CVE-2026-81718
openssl_encrypt before 1.4.9 Weak Cryptographic Parameters -
CVE-2026-79084
Google Chrome 加密问题漏洞 -
CVE-2026-74889
openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF
V. Comments for CVE-2023-29054
No comments yet