CVE-2021-31340

Published: Jun 8, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability has been identified in SIMATIC RF166C (All versions > V1.1 and < V1.3.2), SIMATIC RF185C (All versions > V1.1 and < V1.3.2), SIMATIC RF186C (All versions > V1.1 and < V1.3.2), SIMATIC RF186CI (All versions > V1.1 and < V1.3.2), SIMATIC RF188C (All versions > V1.1 and < V1.3.2), SIMATIC RF188CI (All versions > V1.1 and < V1.3.2), SIMATIC RF360R (All versions < V2.0), SIMATIC Reader RF610R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF610R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF610R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF615R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF615R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF615R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF650R ARIB (All versions > V3.0 < V4.0), SIMATIC Reader RF650R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF650R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF650R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF680R ARIB (All versions > V3.0 < V4.0), SIMATIC Reader RF680R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF680R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF680R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF685R ARIB (All versions > V3.0 < V4.0), SIMATIC Reader RF685R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF685R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF685R FCC (All versions > V3.0 < V4.0). Affected devices do not properly handle large numbers of incoming connections. An attacker may leverage this to cause a Denial-of-Service situation.

Affected (25)

Siemens

25 products

Simatic Rf166c Firmware

Simatic Rf185c Firmware

Simatic Rf186c Firmware

Simatic Rf186ci Firmware

Simatic Rf188c Firmware

Simatic Rf188ci Firmware

Simatic Rf360r Firmware

Simatic Reader Rf610r Cmiit Firmware

Simatic Reader Rf610r Etsi Firmware

Simatic Reader Rf610r Fcc Firmware

Simatic Reader Rf615r Cmiit Firmware

Simatic Reader Rf615r Etsi Firmware

Simatic Reader Rf615r Fcc Firmware

Simatic Reader Rf650r Cmiit Firmware

Simatic Reader Rf650r Etsi Firmware

Simatic Reader Rf650r Fcc Firmware

Simatic Reader Rf650r Arib Firmware

Simatic Reader Rf680r Cmiit Firmware

Simatic Reader Rf680r Etsi Firmware

Simatic Reader Rf680r Fcc Firmware

Simatic Reader Rf680r Arib Firmware

Simatic Reader Rf685r Cmiit Firmware

Simatic Reader Rf685r Etsi Firmware

Simatic Reader Rf685r Fcc Firmware

Simatic Reader Rf685r Arib Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf166c Firmware	After 1.1 to 1.3.2

Running on/with	Platform Versions
Siemens Simatic Rf166c	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf185c Firmware	After 1.1 to 1.3.2

Running on/with	Platform Versions
Siemens Simatic Rf185c	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf186c Firmware	After 1.1 to 1.3.2

Running on/with	Platform Versions
Siemens Simatic Rf186c	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf186ci Firmware	After 1.1 to 1.3.2

Running on/with	Platform Versions
Siemens Simatic Rf186ci	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf188c Firmware	After 1.1 to 1.3.2

Running on/with	Platform Versions
Siemens Simatic Rf188c	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf188ci Firmware	After 1.1 to 1.3.2

Running on/with	Platform Versions
Siemens Simatic Rf188ci	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf360r Firmware	Before 2.0

Running on/with	Platform Versions
Siemens Simatic Rf360r	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf610r Cmiit Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf610r Cmiit	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf610r Etsi Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf610r Etsi	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf610r Fcc Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf610r Fcc	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf615r Cmiit Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf615r Cmiit	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf615r Etsi Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf615r Etsi	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf615r Fcc Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf615r Fcc	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf650r Cmiit Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf650r Cmiit	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf650r Etsi Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf650r Etsi	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf650r Fcc Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf650r Fcc	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf650r Arib Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf650r Arib	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf680r Cmiit Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf680r Cmiit	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf680r Etsi Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf680r Etsi	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf680r Fcc Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf680r Fcc	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf680r Arib Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf680r Arib	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf685r Cmiit Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf685r Cmiit	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf685r Etsi Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf685r Etsi	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf685r Fcc Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf685r Fcc	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf685r Arib Firmware	From 3.0 to 4.0

Running on/with	Platform Versions
Siemens Simatic Reader Rf685r Arib	All versions

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (2)

https://cert-portal.siemens.com/productcert/pdf/ssa-787292.pdf

Source: productcert@siemens.com

MitigationPatchVendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-787292.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationPatchVendor Advisory

Timeline

No history available yet.