HIGH🇵🇱 Wersja polska

CVE-2021-31881

CVSS 7.1v3.1pub. 2021-11-09upd. 2024-11-21

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP OFFER message, the DHCP client application does not validate the length of the Vendor option(s), leading to Denial-of-Service conditions. (FSMD-2021-0008)

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

  • Siemens Apogee Modular Building Controller

    HW
    Siemens
    all versions

  • Siemens Apogee Modular Building Controller Firmware

    OS
    Siemens
    all versions

  • Siemens Apogee Modular Equiment Controller

    HW
    Siemens
    all versions

  • Siemens Apogee Modular Equiment Controller Firmware

    OS
    Siemens
    all versions

  • Siemens Apogee Pxc Compact

    HW
    Siemens
    all versions

  • Siemens Apogee Pxc Compact Firmware

    OS
    Siemens
    all versions

  • Siemens Apogee Pxc Modular

    HW
    Siemens
    all versions

  • Siemens Apogee Pxc Modular Firmware

    OS
    Siemens
    all versions

  • Siemens Capital Vstar

    APP
    Siemens
    all versions

  • Siemens Nucleus Net

    APP
    Siemens
    all versions

  • Siemens Nucleus Readystart V3

    APP
    Siemens
    < 2012.08

  • Siemens Nucleus Source Code

    APP
    Siemens
    all versions

  • Siemens Talon Tc Compact

    HW
    Siemens
    all versions

  • Siemens Talon Tc Compact Firmware

    OS
    Siemens
    all versions

  • Siemens Talon Tc Modular

    HW
    Siemens
    all versions

  • Siemens Talon Tc Modular Firmware

    OS
    Siemens
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-31886CRITICAL9.8PL ✓same product

Siemens Nucleus NET: stack-based buffer overflow w serwerze FTP (pole USER)

CVE-2021-31884CRITICAL9.8PL ✓same product

Błąd terminacji NULL w kliencie DHCP Siemens Nucleus — RCE/DoS

CVE-2022-38371HIGH8.7same product

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet...

CVE-2021-31346HIGH8.2same product

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR...

CVE-2021-31345HIGH7.5same product

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR...