A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4),

Summary

A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < V4.1), SCALANCE XR500 (All versions < V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.

Timeline

1. Mar 15, 2021, 5:03 PM UTCCVE published
2. Jun 2, 2026, 7:24 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. Jun 2, 2026, 7:24 PM UTCRecord last updated

Affected versions

• Siemens RUGGEDCOM RM1224

  Version range not reported

• Siemens SCALANCE M-800

  Version range not reported

• Siemens SCALANCE S615

  Version range not reported

• Siemens SCALANCE SC-600 Family

  Version range not reported

• Siemens SCALANCE XB-200

  All versions < V4.1

• Siemens SCALANCE XC-200

  All versions < V4.1

• Siemens SCALANCE XF-200BA

  All versions < V4.1

• Siemens SCALANCE XM400

  All versions < V6.2

• Siemens SCALANCE XP-200

  All versions < V4.1

• Siemens SCALANCE XR-300WG

  All versions < V4.1

• Siemens SCALANCE XR500

  All versions < V6.2

References 2