CVE-2021-25667
published 2021-03-15CVE-2021-25667: A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and = V4.3 and = V4.3 and = V2.0 and < V2.1.3), SCALANCE XB-200 (All versions <…
high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and = V4.3 and = V4.3 and = V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < V4.1), SCALANCE XR500 (All versions < V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.
Affected
31 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | ruggedcom_rm1224 | — | — |
| siemens | ruggedcom_rm1224_firmware | >= 4.3 < 6.4 | 6.4 |
| siemens | scalance_m-800 | — | — |
| siemens | scalance_m-800_firmware | >= 4.3 < 6.4 | 6.4 |
| siemens | scalance_s615 | — | — |
| siemens | scalance_s615_firmware | >= 4.3 < 6.4 | 6.4 |
| siemens | scalance_sc-600_family | — | — |
| siemens | scalance_sc622-2c_firmware | <= 2.0 | — |
| siemens | scalance_sc622-2c_firmware | >= 2.1 < 2.1.3 | 2.1.3 |
| siemens | scalance_sc632-2c_firmware | <= 2.0 | — |
| siemens | scalance_sc632-2c_firmware | >= 2.1 < 2.1.3 | 2.1.3 |
| siemens | scalance_sc636-2c_firmware | <= 2.0 | — |
| siemens | scalance_sc636-2c_firmware | >= 2.1 < 2.1.3 | 2.1.3 |
| siemens | scalance_sc642-2c_firmware | <= 2.0 | — |
| siemens | scalance_sc642-2c_firmware | >= 2.1 < 2.1.3 | 2.1.3 |
| siemens | scalance_sc646-2c_firmware | <= 2.0 | — |
| siemens | scalance_sc646-2c_firmware | >= 2.1 < 2.1.3 | 2.1.3 |
| siemens | scalance_x300wg_firmware | < 4.1 | 4.1 |
| siemens | scalance_xb-200 | — | — |
| siemens | scalance_xb-200_firmware | < 4.1 | 4.1 |
| siemens | scalance_xc-200 | — | — |
| siemens | scalance_xc-200_firmware | < 4.1 | 4.1 |
| siemens | scalance_xf-200ba | — | — |
| siemens | scalance_xf-200ba_firmware | < 4.1 | 4.1 |
| siemens | scalance_xm400 | — | — |