Vulnerabilities > CVE-2021-31881 - Unspecified vulnerability in Siemens products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

siemens

NVD

Published: 2021-11-09

Updated: 2024-11-21

Summary

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP OFFER message, the DHCP client application does not validate the length of the Vendor option(s), leading to Denial-of-Service conditions. (FSMD-2021-0008)

Vulnerable Configurations

Part	Description	Count
Application	Siemens Siemens Nucleus Source Code * Siemens Nucleus NET * Siemens Capital Vstar * Siemens Nucleus Readystart V3 *	4
OS	Siemens Siemens Apogee Modular Building Controller Firmware * Siemens Apogee Modular Equiment Controller Firmware * Siemens Apogee PXC Compact Firmware * Siemens Apogee PXC Modular Firmware * Siemens Talon TC Compact Firmware * Siemens Talon TC Modular Firmware *	6
Hardware	Siemens Siemens Apogee Modular Building Controller - Siemens Apogee Modular Equiment Controller - Siemens Apogee PXC Compact - Siemens Apogee PXC Modular - Siemens Talon TC Compact - Siemens Talon TC Modular -	6

Summary

Vulnerable Configurations

References