Details of VAR-202304-0694

ID

VAR-202304-0694

CVE

CVE-2023-29054

TITLE

Cryptographic strength vulnerabilities in multiple Siemens products

Trust: 0.8

sources: JVNDB: JVNDB-2023-006528

DESCRIPTION

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SIPLUS NET SCALANCE X202-2P IRT (All versions < V5.5.2). The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. SCALANCE X200-4P IRT firmware, SCALANCE X201-3P IRT firmware, SCALANCE X201-3P IRT PRO Multiple Siemens products, including firmware, have vulnerabilities related to encryption strength.Information may be obtained and information may be tampered with

Trust: 1.62

sources: NVD: CVE-2023-29054 // JVNDB: JVNDB-2023-006528

AFFECTED PRODUCTS

vendor:	siemens	model:	scalance xf204irt	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	siemens	model:	scalance x201-3p irt	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	siemens	model:	scalance x204irt	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	siemens	model:	scalance xf202-2p irt	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	siemens	model:	scalance x204irt pro	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	siemens	model:	scalance xf201-3p irt	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	siemens	model:	scalance x202-2irt	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	siemens	model:	scalance x201-3p irt pro	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	siemens	model:	scalance x202-2p irt pro	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	siemens	model:	scalance xf204-2ba irt	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	siemens	model:	scalance x200-4p irt	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	siemens	model:	scalance x202-2p irt	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	siemens	model:	siplus net scalance x202-2p irt	scope:	lt	version:	5.5.2	Trust: 1.0
vendor:	シーメンス	model:	scalance x201-3p irt pro	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xf204irt	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance x201-3p irt	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xf201-3p irt	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance x200-4p irt	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xf204-2ba irt	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance x204irt pro	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	siplus net scalance x202-2p irt	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xf202-2p irt	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance x202-2irt	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance x202-2p irt pro	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance x202-2p irt	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance x204irt	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2023-006528 // NVD: CVE-2023-29054

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2023-29054
value:	HIGH
Trust: 1.0
productcert@siemens.com:	CVE-2023-29054
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2023-29054
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-202304-793
value:	HIGH
Trust: 0.6

nvd@nist.gov:	CVE-2023-29054
baseSeverity:	HIGH
baseScore:	7.4
vectorString:	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
attackVector:	NETWORK
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	2.2
impactScore:	5.2
version:	3.1
Trust: 1.0
productcert@siemens.com:	CVE-2023-29054
baseSeverity:	MEDIUM
baseScore:	6.7
vectorString:	CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.2
impactScore:	5.5
version:	3.1
Trust: 1.0
NVD:	CVE-2023-29054
baseSeverity:	HIGH
baseScore:	7.4
vectorString:	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
attackVector:	NETWORK
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2023-006528 // CNNVD: CNNVD-202304-793 // NVD: CVE-2023-29054 // NVD: CVE-2023-29054

PROBLEMTYPE DATA

problemtype:	CWE-326	Trust: 1.0
problemtype:	Inappropriate cryptographic strength (CWE-326) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2023-006528 // NVD: CVE-2023-29054

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202304-793

TYPE

encryption problem

Trust: 0.6

sources: CNNVD: CNNVD-202304-793

PATCH

title:

Siemens SCALANCE Fixes for encryption problem vulnerabilities

url:

http://123.124.177.30/web/xxk/bdxqById.tag?id=234432

Trust: 0.6

sources: CNNVD: CNNVD-202304-793

EXTERNAL IDS

db:	NVD	id:	CVE-2023-29054	Trust: 3.2
db:	SIEMENS	id:	SSA-479249	Trust: 2.4
db:	ICS CERT	id:	ICSA-23-103-05	Trust: 0.8
db:	JVN	id:	JVNVU94715153	Trust: 0.8
db:	JVNDB	id:	JVNDB-2023-006528	Trust: 0.8
db:	CNNVD	id:	CNNVD-202304-793	Trust: 0.6

sources: JVNDB: JVNDB-2023-006528 // CNNVD: CNNVD-202304-793 // NVD: CVE-2023-29054

REFERENCES

url:	https://cert-portal.siemens.com/productcert/pdf/ssa-479249.pdf	Trust: 2.4
url:	https://jvn.jp/vu/jvnvu94715153/	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2023-29054	Trust: 0.8
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-05	Trust: 0.8
url:	https://cxsecurity.com/cveshow/cve-2023-29054/	Trust: 0.6

sources: JVNDB: JVNDB-2023-006528 // CNNVD: CNNVD-202304-793 // NVD: CVE-2023-29054

SOURCES

db:	JVNDB	id:	JVNDB-2023-006528
db:	CNNVD	id:	CNNVD-202304-793
db:	NVD	id:	CVE-2023-29054

LAST UPDATE DATE

2024-08-14T12:12:41.046000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2023-006528	date:	2023-11-15T05:05:00
db:	CNNVD	id:	CNNVD-202304-793	date:	2023-04-21T00:00:00
db:	NVD	id:	CVE-2023-29054	date:	2023-04-20T18:43:29.747

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2023-006528	date:	2023-11-15T00:00:00
db:	CNNVD	id:	CNNVD-202304-793	date:	2023-04-11T00:00:00
db:	NVD	id:	CVE-2023-29054	date:	2023-04-11T10:15:18.517