← Back

CVE-2021-31889

nvd nist
Published: Nov 9, 2021Modified: Jun 17, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0). Malformed TCP packets with a corrupted SACK option leads to Information Leaks and Denial-of-Service conditions. (FSMD-2021-0015)

Affected (10)

Siemens
10 products
Capital Vstar
Nucleus Net
Nucleus Readystart V3
Nucleus Source Code
Apogee Modular Equiment Controller Firmware
Apogee Pxc Compact Firmware
Apogee Pxc Modular Firmware
Talon Tc Compact Firmware
Talon Tc Modular Firmware
Apogee Modular Building Controller Firmware
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Capital Vstar
All versions
Nucleus Net
All versions
Nucleus Readystart V3
Before 2017.02.3
Nucleus Source Code
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Apogee Modular Equiment Controller Firmware
All versions
Running on/withPlatform Versions
Siemens
Apogee Modular Equiment Controller
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Apogee Pxc Compact Firmware
All versions
Running on/withPlatform Versions
Siemens
Apogee Pxc Compact
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Apogee Pxc Modular Firmware
All versions
Running on/withPlatform Versions
Siemens
Apogee Pxc Modular
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Talon Tc Compact Firmware
All versions
Running on/withPlatform Versions
Siemens
Talon Tc Compact
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Talon Tc Modular Firmware
All versions
Running on/withPlatform Versions
Siemens
Talon Tc Modular
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Apogee Modular Building Controller Firmware
All versions
Running on/withPlatform Versions
Siemens
Apogee Modular Building Controller
All versions

Related CWEs

CWE-191
Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

References (15)

Source: productcert@siemens.com
Source: productcert@siemens.com
Source: productcert@siemens.com
Source: productcert@siemens.com
Source: productcert@siemens.com
Source: productcert@siemens.com
Vendor Advisory
Source: productcert@siemens.com
Vendor Advisory
Source: productcert@siemens.com
Source: productcert@siemens.com
Source: productcert@siemens.com
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.