CVE-2021-29998

nvd nist

Published: Apr 13, 2021Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.

Affected (36)

Windriver

1 product

Vxworks

Siemens

35 products

Ruggedcom Win Subscriber Station Firmware

Scalance X200 4 P Irt Firmware

Scalance X201 3p Irt Firmware

Scalance X201 3p Irt Pro Firmware

Scalance X202 2 Irt Firmware

Scalance X202 2p Irt Firmware

Scalance X202 2p Irt Pro Firmware

Scalance X204 Irt Firmware

Scalance X204 Irt Pro Firmware

Scalance X204 2 Firmware

Scalance X204 2fm Firmware

Scalance X204 2ld Firmware

Scalance X204 2ld Ts Firmware

Scalance X204 2ts Firmware

Scalance X206 1 Firmware

Scalance X206 1ld Firmware

Scalance X208 Firmware

Scalance X208 Pro Firmware

Scalance X212 2 Firmware

Scalance X212 2ld Firmware

Scalance X216 Firmware

Scalance X224 Firmware

Scalance X300 Firmware

Scalance X408 Firmware

Scalance Xf201 3p Irt Firmware

Scalance Xf202 2p Irt Firmware

Scalance Xf204 Firmware

Scalance Xf204 Irt Firmware

Scalance Xf204 2 Firmware

Scalance Xf204 2ba Irt Firmware

Scalance Xf206 1 Firmware

Scalance Xf208 Firmware

Simatic Rf 181 Eip Firmware

Simatic Rf 182c Firmware

Sinamics Perfect Harmony Gh180 Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Windriver Vxworks	Before 6.5

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Win Subscriber Station Firmware	All versions

Running on/with	Platform Versions
Siemens Ruggedcom Win Subscriber Station	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X200 4 P Irt Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X200 4 P Irt	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X201 3p Irt Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X201 3p Irt	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X201 3p Irt Pro Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X201 3p Irt Pro	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X202 2 Irt Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X202 2 Irt	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X202 2p Irt Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X202 2p Irt	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X202 2p Irt Pro Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X202 2p Irt Pro	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X204 Irt Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X204 Irt	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X204 Irt Pro Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X204 Irt Pro	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X204 2 Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X204 2	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X204 2fm Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X204 2fm	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X204 2ld Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X204 2ld	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X204 2ld Ts Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X204 2ld Ts	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X204 2ts Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X204 2ts	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X206 1 Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X206 1	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X206 1ld Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X206 1ld	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X208 Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X208	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X208 Pro Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X208 Pro	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X212 2 Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X212 2	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X212 2ld Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X212 2ld	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X216 Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X216	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X224 Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X224	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X300 Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X300	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X408 Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance X408	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Xf201 3p Irt Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance Xf201 3p Irt	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Xf202 2p Irt Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance Xf202 2p Irt	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Xf204 Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance Xf204	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Xf204 Irt Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance Xf204 Irt	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Xf204 2 Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance Xf204 2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Xf204 2ba Irt Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance Xf204 2ba Irt	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Xf206 1 Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance Xf206 1	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance Xf208 Firmware	All versions

Running on/with	Platform Versions
Siemens Scalance Xf208	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf 181 Eip Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Rf 181 Eip	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf 182c Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Rf 182c	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Sinamics Perfect Harmony Gh180 Firmware	From 2015 to 2022

Running on/with	Platform Versions
Siemens Sinamics Perfect Harmony Gh180	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (8)

https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf

Source: cve@mitre.org

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf

Source: cve@mitre.org

Third Party Advisory

https://support2.windriver.com/index.php?page=security-notices

Source: cve@mitre.org

Vendor Advisory

https://us-cert.cisa.gov/ics/advisories/icsa-21-194-12

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support2.windriver.com/index.php?page=security-notices

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://us-cert.cisa.gov/ics/advisories/icsa-21-194-12

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.