Back to feed
EUVD-2021-18256 · Published Nov 9, 2021
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an ICMP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0007)
Technologies
Siemens Nucleus Readystart V4Siemens Nucleus Source CodeSiemens Apogee Modular Building Controller FirmwareSiemens Talon Tc ModularSiemens Apogee Pxc ModularSiemens Apogee Pxc Compact FirmwareSiemens Apogee Pxc CompactSiemens Apogee Pxc Modular FirmwareSiemens Nucleus NetSiemens Talon Tc CompactSiemens Capital VstarSiemens Talon Tc Compact FirmwareSiemens Apogee Modular Equiment Controller FirmwareSiemens Talon Tc Modular FirmwareSiemens Nucleus Readystart V3Siemens Apogee Modular Equiment ControllerSiemens Apogee Modular Building Controller
Weaknesses
CWE-1284
CVSS scores
- v3.19.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - v2.06.4
AV:N/AC:L/Au:N/C:P/I:N/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- https://cert-portal.siemens.com/productcert/html/ssa-044112.html
- https://cert-portal.siemens.com/productcert/html/ssa-114589.html
- https://cert-portal.siemens.com/productcert/html/ssa-223353.html
- https://cert-portal.siemens.com/productcert/html/ssa-620288.html
- https://cert-portal.siemens.com/productcert/html/ssa-845392.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf
Potentially impacted assets
See if this affects your attack surface
