High severity7.5NVD Advisory· Published May 12, 2021· Updated Jun 17, 2026
CVE-2020-28393
CVE-2020-28393
Description
An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:o:siemens:scalance_xm-400_firmware:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:siemens:scalance_xm-400_firmware:*:*:*:*:*:*:*:*range: <6.4
- cpe:2.3:o:siemens:scalance_xm408-4c_l3_firmware:*:*:*:*:*:*:*:*range: <6.4
- cpe:2.3:o:siemens:scalance_xm408-8c_l3_firmware:*:*:*:*:*:*:*:*range: <6.4
- cpe:2.3:o:siemens:scalance_xm416-4c_l3_firmware:*:*:*:*:*:*:*:*range: <6.4
cpe:2.3:o:siemens:scalance_xm408-4c_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:siemens:scalance_xm408-4c_firmware:*:*:*:*:*:*:*:*range: <6.4
- cpe:2.3:o:siemens:scalance_xm408-8c_firmware:*:*:*:*:*:*:*:*range: <6.4
- cpe:2.3:o:siemens:scalance_xm416-4c_firmware:*:*:*:*:*:*:*:*Range: <6.4
cpe:2.3:o:siemens:scalance_xr524_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:siemens:scalance_xr524_firmware:*:*:*:*:*:*:*:*range: <6.4
- cpe:2.3:o:siemens:scalance_xr552_firmware:*:*:*:*:*:*:*:*range: <6.4
- cpe:2.3:o:siemens:scalance_xr526_firmware:*:*:*:*:*:*:*:*Range: <6.4
- cpe:2.3:o:siemens:scalance_xr528_firmware:*:*:*:*:*:*:*:*Range: <6.4
- Siemens/SCALANCE XM-400description
- Range: <v6.4
- Range: <v6.4
Patches
Vulnerability mechanics
References
2- cert-portal.siemens.com/productcert/pdf/ssa-116379.pdfnvdVendor Advisory
- us-cert.cisa.gov/ics/advisories/icsa-21-131-10nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.