CVE-2021-31884

CWE-170CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.7%
top 27.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
44
Siemens Apogee PXC Compact FirmwareSiemens Apogee PXC Modular FirmwareSiemens Desigo Pxc00-e.d Firmware+41 more
Timeline
PublishedNov 9
Latest updateMay 24

Description

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and < V6.30.016), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucle…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages45 packages

▶CVEListV5siemens/apogee_pxc_compact_(bacnet)All versions < V3.5.4
▶CVEListV5siemens/apogee_pxc_modular_(bacnet)All versions < V3.5.4
▶CVEListV5siemens/apogee_mbc_(ppc)_(bacnet)All versions
▶CVEListV5siemens/apogee_mec_(ppc)_(bacnet)All versions
▶CVEListV5siemens/talon_tc_compact_(bacnet)All versions < V3.5.4

🔴Vulnerability Details

2
GHSA
GHSA-7p4v-ppf8-95r7: A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACn↗2022-05-24
▶
CVEList
CVE-2021-31884: A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACn↗2021-11-09
▶
CVE-2021-31884 (CRITICAL CVSS 9.8) | A vulnerability has been identified | cvebase.io