HIGH🇬🇧 English

CVE-2021-31346

CVSS 8.2v3.1pub. 2021-11-09upd. 2024-11-21

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an ICMP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0007)

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

  • Siemens Apogee Modular Building Controller

    HW
    Siemens
    wszystkie wersje

  • Siemens Apogee Modular Building Controller Firmware

    OS
    Siemens
    wszystkie wersje

  • Siemens Apogee Modular Equiment Controller

    HW
    Siemens
    wszystkie wersje

  • Siemens Apogee Modular Equiment Controller Firmware

    OS
    Siemens
    wszystkie wersje

  • Siemens Apogee Pxc Compact

    HW
    Siemens
    wszystkie wersje

  • Siemens Apogee Pxc Compact Firmware

    OS
    Siemens
    wszystkie wersje

  • Siemens Apogee Pxc Modular

    HW
    Siemens
    wszystkie wersje

  • Siemens Apogee Pxc Modular Firmware

    OS
    Siemens
    wszystkie wersje

  • Siemens Capital Vstar

    APP
    Siemens
    wszystkie wersje

  • Siemens Nucleus Net

    APP
    Siemens
    wszystkie wersje

  • Siemens Nucleus Readystart V3

    APP
    Siemens
    < 2017.02.1

  • Siemens Nucleus Readystart V4

    APP
    Siemens
    < 4.1.1

  • Siemens Nucleus Source Code

    APP
    Siemens
    wszystkie wersje

  • Siemens Talon Tc Compact

    HW
    Siemens
    wszystkie wersje

  • Siemens Talon Tc Compact Firmware

    OS
    Siemens
    wszystkie wersje

  • Siemens Talon Tc Modular

    HW
    Siemens
    wszystkie wersje

  • Siemens Talon Tc Modular Firmware

    OS
    Siemens
    wszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2021-31886CRITICAL9.8ten sam produkt

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet...

CVE-2021-31884CRITICAL9.8ten sam produkt

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet...

CVE-2022-38371HIGH8.7ten sam produkt

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet...

CVE-2021-31881HIGH7.1ten sam produkt

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR...

CVE-2021-31345HIGH7.5ten sam produkt

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR...