CVE-2021-31346

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-31346
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an ICMP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0007)

8.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

6.4 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:P

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://cert-portal.siemens.com/productcert/html/ssa-044112.html
https://cert-portal.siemens.com/productcert/html/ssa-114589.html
https://cert-portal.siemens.com/productcert/html/ssa-223353.html
https://cert-portal.siemens.com/productcert/html/ssa-620288.html
https://cert-portal.siemens.com/productcert/html/ssa-845392.html
https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-223353.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-223353.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:siemens:capital_vstar:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:nucleus_readystart_v4:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:nucleus_source_code:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:siemens:apogee_modular_building_controller_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:apogee_modular_building_controller:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:apogee_modular_equiment_controller_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:apogee_modular_equiment_controller:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:siemens:apogee_pxc_compact_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:apogee_pxc_compact:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:siemens:apogee_pxc_modular_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:apogee_pxc_modular:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:siemens:talon_tc_compact_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:talon_tc_compact:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:siemens:talon_tc_modular_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:talon_tc_modular:-:*:*:*:*:*:*:*
History

21 Nov 2024, 06:05

Type Values Removed Values Added
References () https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf - Vendor Advisory () https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf - Vendor Advisory
References () https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf - Vendor Advisory () https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf - Vendor Advisory
References () https://cert-portal.siemens.com/productcert/pdf/ssa-223353.pdf - () https://cert-portal.siemens.com/productcert/pdf/ssa-223353.pdf -
References () https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf - () https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf -
References () https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf - () https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf -
CVSS v2 : 6.4
v3 : 9.1 		v2 : 6.4
v3 : 8.2

08 Oct 2024, 09:15

Type Values Removed Values Added
References
  • () https://cert-portal.siemens.com/productcert/html/ssa-044112.html -
  • () https://cert-portal.siemens.com/productcert/html/ssa-114589.html -
  • () https://cert-portal.siemens.com/productcert/html/ssa-223353.html -
  • () https://cert-portal.siemens.com/productcert/html/ssa-620288.html -
  • () https://cert-portal.siemens.com/productcert/html/ssa-845392.html -
Summary (en) A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.4), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.19), Capital VSTAR (All versions with enabled Ethernet options), Desigo PXC00-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC00-U (All versions >= V2.3 and < V6.30.016), Desigo PXC001-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC100-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC12-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC128-U (All versions >= V2.3 and < V6.30.016), Desigo PXC200-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC22-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC22.1-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC36.1-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC50-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC64-U (All versions >= V2.3 and < V6.30.016), Desigo PXM20-E (All versions >= V2.3 and < V6.30.016), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.1), Nucleus Source Code (All versions), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), TALON TC Compact (BACnet) (All versions < V3.5.4), TALON TC Modular (BACnet) (All versions < V3.5.4). The total length of an ICMP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0007) (en) A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an ICMP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0007)
Information

Published : 2021-11-09 12:15

Updated : 2024-11-21 06:05

NVD link : CVE-2021-31346

Mitre link : CVE-2021-31346

CVE.ORG link : CVE-2021-31346

JSON object : View

Products Affected

siemens

  • apogee_modular_building_controller
  • apogee_pxc_compact
  • apogee_pxc_modular
  • talon_tc_modular
  • apogee_modular_building_controller_firmware
  • nucleus_readystart_v3
  • nucleus_source_code
  • capital_vstar
  • apogee_modular_equiment_controller_firmware
  • apogee_modular_equiment_controller
  • apogee_pxc_compact_firmware
  • talon_tc_compact
  • talon_tc_compact_firmware
  • talon_tc_modular_firmware
  • nucleus_net
  • nucleus_readystart_v4
  • apogee_pxc_modular_firmware
CWE
CWE-1284

Improper Validation of Specified Quantity in Input