Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2023-29054: A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All

28
Routine
MEDIUM 6.7UPGRADEUPGRADEUPGRADE

CVE-2023-29054 is a medium-severity flaw (CVSS 6.7) affecting scalance x200-4p irt firmware, scalance x201-3p irt firmware, scalance x201-3p irt pro firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), S

Why this priority

  • No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score6.7 (Medium)
Attack vectorAdjacent network
Attack complexityHigh
Privileges neededNone
User interactionRequired
EPSS exploit chance0.3% (top 84%)
CISA exploited listNo
WeaknessCWE-326
Published2023-04-11
Last modified2026-10-23
Publisher (CNA): Siemens AG · Vendor: siemens

Last updated 2026-10-23 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

siemens scalance x200-4p irt firmware UPGRADE
Affected: < 5.5.2
Fixed in: 5.5.2
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
siemens scalance x201-3p irt firmware UPGRADE
Affected: < 5.5.2
Fixed in: 5.5.2
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
siemens scalance x201-3p irt pro firmware UPGRADE
Affected: < 5.5.2
Fixed in: 5.5.2
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
siemens scalance x202-2irt firmware UPGRADE
Affected: < 5.5.2
Fixed in: 5.5.2
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
siemens scalance x202-2p irt firmware UPGRADE
Affected: < 5.5.2
Fixed in: 5.5.2
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
siemens scalance x202-2p irt pro firmware UPGRADE
Affected: < 5.5.2
Fixed in: 5.5.2
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-29054?

scalance x200-4p irt firmware: upgrade to 5.5.2; scalance x201-3p irt firmware: upgrade to 5.5.2; scalance x201-3p irt pro firmware: upgrade to 5.5.2. Exact commands for each OS are on this page.

Is CVE-2023-29054 being exploited?

CVE-2023-29054 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-29054 affect?

CVE-2023-29054 affects scalance x200-4p irt firmware, scalance x201-3p irt firmware, scalance x201-3p irt pro firmware. Severity is medium (CVSS 6.7). A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2

How urgent is CVE-2023-29054?

Priority 28/100. No elevated risk signals yet.

References

← Back to latest CVEs