Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2021-11-09	CVE-2021-31890	Improper Handling of Inconsistent Structural Elements vulnerability in Siemens products A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). network low complexity siemens CWE-240 critical	9.1
2021-11-09	CVE-2021-31346	Improper Validation of Specified Quantity in Input vulnerability in Siemens products A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). network low complexity siemens CWE-1284 critical	9.1