HIGH🇵🇱 Wersja polska

CVE-2021-31345

CVSS 7.5v3.1pub. 2021-11-09upd. 2024-11-21

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions). The total length of an UDP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on a user-defined applications that runs on top of the UDP protocol. (FSMD-2021-0006)

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Siemens Apogee Modular Building Controller

    HW
    Siemens
    all versions

  • Siemens Apogee Modular Building Controller Firmware

    OS
    Siemens
    all versions

  • Siemens Apogee Modular Equiment Controller

    HW
    Siemens
    all versions

  • Siemens Apogee Modular Equiment Controller Firmware

    OS
    Siemens
    all versions

  • Siemens Apogee Pxc Compact

    HW
    Siemens
    all versions

  • Siemens Apogee Pxc Compact Firmware

    OS
    Siemens
    all versions

  • Siemens Apogee Pxc Modular

    HW
    Siemens
    all versions

  • Siemens Apogee Pxc Modular Firmware

    OS
    Siemens
    all versions

  • Siemens Capital Vstar

    APP
    Siemens
    all versions

  • Siemens Nucleus Net

    APP
    Siemens
    all versions

  • Siemens Nucleus Readystart V3

    APP
    Siemens
    < 2014.12

  • Siemens Nucleus Source Code

    APP
    Siemens
    all versions

  • Siemens Talon Tc Compact

    HW
    Siemens
    all versions

  • Siemens Talon Tc Compact Firmware

    OS
    Siemens
    all versions

  • Siemens Talon Tc Modular

    HW
    Siemens
    all versions

  • Siemens Talon Tc Modular Firmware

    OS
    Siemens
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-31886CRITICAL9.8PL ✓same product

Siemens Nucleus NET: stack-based buffer overflow w serwerze FTP (pole USER)

CVE-2021-31884CRITICAL9.8PL ✓same product

Błąd terminacji NULL w kliencie DHCP Siemens Nucleus — RCE/DoS

CVE-2022-38371HIGH8.7same product

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet...

CVE-2021-31881HIGH7.1same product

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR...

CVE-2021-31346HIGH8.2same product

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR...