CVE-2021-31885

published 2021-11-09

CVE-2021-31885: A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and < V6.30.016), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.1), Nucleus Source Code (All versions), PLUSCONTROL 1st Gen (All versions), TALON TC Compact (BACnet) (All versions < V3.5.4), TALON TC Modular (BACnet) (All versions < V3.5.4). TFTP server application allows for reading the contents of the TFTP memory buffer via sending malformed TFTP commands. (FSMD-2021-0009)

Affected

28 ranges · showing 25

Vendor	Product	Version range	Fixed in
siemens	apogee_mbc	—	—
siemens	apogee_mec	—	—
siemens	apogee_pxc_compact	—	—
siemens	apogee_pxc_compact	—	—
siemens	apogee_pxc_modular	—	—
siemens	apogee_pxc_modular	—	—
siemens	desigo_pxc00-e.d	—	—
siemens	desigo_pxc00-u	—	—
siemens	desigo_pxc001-e.d	—	—
siemens	desigo_pxc100-e.d	—	—
siemens	desigo_pxc12-e.d	—	—
siemens	desigo_pxc128-u	—	—
siemens	desigo_pxc200-e.d	—	—
siemens	desigo_pxc22-e.d	—	—
siemens	desigo_pxc22.1-e.d	—	—
siemens	desigo_pxc36.1-e.d	—	—
siemens	desigo_pxc50-e.d	—	—
siemens	desigo_pxc64-u	—	—
siemens	desigo_pxm20-e	—	—
siemens	nucleus_net	—	—
siemens	nucleus_readystart_v3	< 2017.02.4	2017.02.4
siemens	nucleus_readystart_v3	—	—
siemens	nucleus_readystart_v4	< 4.1.1	4.1.1
siemens	nucleus_readystart_v4	—	—
siemens	nucleus_source_code	—	—

CWE-805