CVE-2021-31884
published 2021-11-09CVE-2021-31884: A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All…
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and < V6.30.016), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus Source Code (All versions), TALON TC Compact (BACnet) (All versions < V3.5.4), TALON TC Modular (BACnet) (All versions < V3.5.4). The DHCP client application assumes that the data supplied with the “Hostname” DHCP option is NULL terminated. In cases when global hostname variable is not defined, this may lead to Out-of-bound reads, writes, and Denial-of-service conditions. (FSMD-2021-0014)
Affected
45 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | apogee_mbc | — | — |
| siemens | apogee_mec | — | — |
| siemens | apogee_pxc_compact | — | — |
| siemens | apogee_pxc_compact | — | — |
| siemens | apogee_pxc_compact_firmware | < 2.8.19 | 2.8.19 |
| siemens | apogee_pxc_compact_firmware | < 3.5.4 | 3.5.4 |
| siemens | apogee_pxc_modular | — | — |
| siemens | apogee_pxc_modular | — | — |
| siemens | apogee_pxc_modular_firmware | < 2.8.19 | 2.8.19 |
| siemens | apogee_pxc_modular_firmware | < 3.5.4 | 3.5.4 |
| siemens | capital_vstar | — | — |
| siemens | desigo_pxc00-e.d | — | — |
| siemens | desigo_pxc00-e.d_firmware | >= 2.3 < 6.30.016 | 6.30.016 |
| siemens | desigo_pxc00-u | — | — |
| siemens | desigo_pxc00-u_firmware | >= 2.3 < 6.30.016 | 6.30.016 |
| siemens | desigo_pxc001-e.d | — | — |
| siemens | desigo_pxc001-e.d_firmware | >= 2.3 < 6.30.016 | 6.30.016 |
| siemens | desigo_pxc100-e.d | — | — |
| siemens | desigo_pxc100-e.d_firmware | >= 2.3 < 6.30.016 | 6.30.016 |
| siemens | desigo_pxc12-e.d | — | — |
| siemens | desigo_pxc12-e.d_firmware | >= 2.3 < 6.30.016 | 6.30.016 |
| siemens | desigo_pxc128-u | — | — |
| siemens | desigo_pxc128-u_firmware | >= 2.3 < 6.30.016 | 6.30.016 |
| siemens | desigo_pxc200-e.d | — | — |
| siemens | desigo_pxc200-e.d_firmware | >= 2.3 < 6.30.016 | 6.30.016 |