CVE-2021-25676

CWE-3073 documents3 sources
Severity
7.5HIGH
EPSS
0.3%
top 43.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Siemens Scalance Sc-600 FirmwareSiemens Ruggedcom Rm1224Siemens Scalance M-800+5 more
Timeline
PublishedMar 15
Latest updateMay 24

Description

A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages8 packages

▶CVEListV5siemens/scalance_s615V6.3
▶CVEListV5siemens/scalance_m-800V6.3
▶CVEListV5siemens/scalance_sc-600All Versions >= V2.1 and < V2.1.3

🔴Vulnerability Details

2
GHSA
GHSA-pg2c-638q-xw3m: A vulnerability has been identified in RUGGEDCOM RM1224 (V6↗2022-05-24
▶
CVEList
CVE-2021-25676: A vulnerability has been identified in RUGGEDCOM RM1224 (V6↗2021-03-15
▶