Vulnerability Description
The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value.
Affected Platforms (CPE)
💻
Scalance X 200 Series Firmware
<= 4.4💻
Scalance X 200 Series Firmware
= 4.3🔌
Scalance X 200
All versions🔌
Scalance X 200rna
All versions🔌
Scalance X200 4p Irt
All versions🔌
Scalance X201 3p Irt
All versions🔌
Scalance X201 3p Irt
All versions🔌
Scalance X202 2irt
All versions🔌
Scalance X202 2p Irt
All versions🔌
Scalance X202 2p Irt
All versions🔌
Scalance X204irt
All versions🔌
Scalance X204irt
All versions🔌
Scalance Xf 200
All versions