HIGH🇬🇧 English

CVE-2021-25667

CVSS 8.8v3.1pub. 2021-03-15upd. 2026-06-02

A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < V4.1), SCALANCE XR500 (All versions < V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Siemens Ruggedcom Rm1224

    HW
    Siemens
    wszystkie wersje

  • Siemens Ruggedcom Rm1224 Firmware

    OS
    Siemens
    4.3 – 6.4 (bez)

  • Siemens Scalance M 800

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M 800 Firmware

    OS
    Siemens
    4.3 – 6.4 (bez)

  • Siemens Scalance S615

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance S615 Firmware

    OS
    Siemens
    4.3 – 6.4 (bez)

  • Siemens Scalance Sc622 2c

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Sc622 2c Firmware

    OS
    Siemens
    2.1 – 2.1.3 (bez)≤ 2.0

  • Siemens Scalance Sc632 2c

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Sc632 2c Firmware

    OS
    Siemens
    ≤ 2.02.1 – 2.1.3 (bez)

  • Siemens Scalance Sc636 2c

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Sc636 2c Firmware

    OS
    Siemens
    2.1 – 2.1.3 (bez)≤ 2.0

  • Siemens Scalance Sc642 2c

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Sc642 2c Firmware

    OS
    Siemens
    2.1 – 2.1.3 (bez)≤ 2.0

  • Siemens Scalance Sc646 2c

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Sc646 2c Firmware

    OS
    Siemens
    2.1 – 2.1.3 (bez)≤ 2.0

  • Siemens Scalance X300wg

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance X300wg Firmware

    OS
    Siemens
    < 4.1

  • Siemens Scalance Xb 200

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Xb 200 Firmware

    OS
    Siemens
    < 4.1

  • Siemens Scalance Xc 200

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Xc 200 Firmware

    OS
    Siemens
    < 4.1

  • Siemens Scalance Xf 200ba

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Xf 200ba Firmware

    OS
    Siemens
    < 4.1

  • Siemens Scalance Xm400

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Xm400 Firmware

    OS
    Siemens
    < 6.2

  • Siemens Scalance Xp 200

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Xp 200 Firmware

    OS
    Siemens
    < 4.1

  • Siemens Scalance Xr500

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Xr500 Firmware

    OS
    Siemens
    < 6.2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEMemory
CWE
Referencje

Powiązane podatności

CVE-2022-36323CRITICAL9.1PL ✓ten sam produkt

Siemens Scalance M-800/S615/SC-600 — command injection umożliwiający uzyskanie root shell

CVE-2019-6569CRITICAL9.1PL ✓ten sam produkt

Siemens Scalance X — niewystarczająca izolacja portu mirror

CVE-2017-14491CRITICAL9.8PL ✓ten sam produkt

Heap-based buffer overflow w dnsmasq umożliwiający RCE lub DoS

CVE-2024-50557HIGH8.6ten sam produkt

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2),...

CVE-2024-50572HIGH8.6ten sam produkt

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2),...