Siemens SCALANCE X-200RNA Switch Devices

An attacker could remotely execute commands on your network switch, potentially disrupting critical network connectivity for control systems, or cause the device to stop responding, taking critical industrial networks offline.

Network switch operators and IT/OT teams at water utilities, electric utilities, and manufacturing facilities should prioritize this. SCALANCE X-200RNA series are backbone network switches used to connect PLCs, RTUs, and other industrial devices. A compromised switch can disrupt communications across your entire control system network and potentially allow lateral movement to control devices.

An attacker on your network or the Internet sends a crafted packet to ports 22 (SSH) or 443 (HTTPS) on the vulnerable switch. Because no authentication is required and the attack complexity is low, the attacker can trigger a buffer overflow or other code execution flaw to run arbitrary commands on the device or crash it, disrupting network communication across your facility.