Siemens Scalance X Buffer Overflow Vulnerability

A buffer overflow in Siemens Scalance X industrial switches could allow an attacker with network access to crash the switch or execute arbitrary code, disrupting network connectivity to your field devices, RTUs, or PLCs.

Water authorities and electric utilities using Siemens Scalance X industrial Ethernet switches (including X414-3E, X308-2M, X-300EEC, XR-300, and X-300 models) for operational networks should assess their exposure. These switches are typically used to carry critical control and SCADA traffic between field devices and control centers.

An attacker with network connectivity to a Scalance X switch could send a malformed packet or command that exceeds the buffer boundaries. If successful, this could crash the device or potentially execute code on the switch to alter its behavior or take it offline.