description: A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). Devices do not create a new unique private key after factory reset. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.
problem types: CWE-321: Use of Hard-coded Cryptographic Key
affected:
{
vendor: Siemens
product: SCALANCE X-200RNA switch family
versions:
version: All versions < V3.2.7, status: affected
}
{
vendor: Siemens
product: SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)
versions:
version: All versions < V4.1.0, status: affected
}
