CVE-2021-31895

Published: Jul 13, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD (Secondary)

Description

A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.7), RUGGEDCOM i801 (All versions < V4.3.7), RUGGEDCOM i802 (All versions < V4.3.7), RUGGEDCOM i803 (All versions < V4.3.7), RUGGEDCOM M2100 (All versions < V4.3.7), RUGGEDCOM M2200 (All versions < V4.3.7), RUGGEDCOM M969 (All versions < V4.3.7), RUGGEDCOM RMC30 (All versions < V4.3.7), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.7), RUGGEDCOM RMC8388 V5.X (All versions < V5.5.4), RUGGEDCOM RP110 (All versions < V4.3.7), RUGGEDCOM RS1600 (All versions < V4.3.7), RUGGEDCOM RS1600F (All versions < V4.3.7), RUGGEDCOM RS1600T (All versions < V4.3.7), RUGGEDCOM RS400 (All versions < V4.3.7), RUGGEDCOM RS401 (All versions < V4.3.7), RUGGEDCOM RS416 (All versions < V4.3.7), RUGGEDCOM RS416P (All versions < V4.3.7), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.7), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.5.4), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.7), RUGGEDCOM RS416v2 V5.X (All versions < 5.5.4), RUGGEDCOM RS8000 (All versions < V4.3.7), RUGGEDCOM RS8000A (All versions < V4.3.7), RUGGEDCOM RS8000H (All versions < V4.3.7), RUGGEDCOM RS8000T (All versions < V4.3.7), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RS900G (All versions < V4.3.7), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RS900GP (All versions < V4.3.7), RUGGEDCOM RS900L (All versions < V4.3.7), RUGGEDCOM RS900W (All versions < V4.3.7), RUGGEDCOM RS910 (All versions < V4.3.7), RUGGEDCOM RS910L (All versions < V4.3.7), RUGGEDCOM RS910W (All versions < V4.3.7), RUGGEDCOM RS920L (All versions < V4.3.7), RUGGEDCOM RS920W (All versions < V4.3.7), RUGGEDCOM RS930L (All versions < V4.3.7), RUGGEDCOM RS930W (All versions < V4.3.7), RUGGEDCOM RS940G (All versions < V4.3.7), RUGGEDCOM RS969 (All versions < V4.3.7), RUGGEDCOM RSG2100 (All versions < V4.3.7), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RSG2100P (All versions < V4.3.7), RUGGEDCOM RSG2100P (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RSG2200 (All versions < V4.3.7), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2288 V5.X (All versions < V5.5.4), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2300 V5.X (All versions < V5.5.4), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.7), RUGGEDCOM RSG2300P V5.X (All versions < V5.5.4), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2488 V5.X (All versions < V5.5.4), RUGGEDCOM RSG907R (All versions < V5.5.4), RUGGEDCOM RSG908C (All versions < V5.5.4), RUGGEDCOM RSG909R (All versions < V5.5.4), RUGGEDCOM RSG910C (All versions < V5.5.4), RUGGEDCOM RSG920P V4.X (All versions < V4.3.7), RUGGEDCOM RSG920P V5.X (All versions < V5.5.4), RUGGEDCOM RSL910 (All versions < V5.5.4), RUGGEDCOM RST2228 (All versions < V5.5.4), RUGGEDCOM RST2228P (All versions < V5.5.4), RUGGEDCOM RST916C (All versions < V5.5.4), RUGGEDCOM RST916P (All versions < V5.5.4). The DHCP client in affected devices fails to properly sanitize incoming DHCP packets. This could allow an unauthenticated remote attacker to cause memory to be overwritten, potentially allowing remote code execution.

Affected (65)

Products: Siemens: Ruggedcom Ros I800, Ruggedcom Ros I801, Ruggedcom Ros I802, Ruggedcom Ros I803, Ruggedcom Ros M969, Ruggedcom Ros M2100, Ruggedcom Ros M2200, Ruggedcom Ros Rmc, Ruggedcom Ros Rmc20, Ruggedcom Ros Rmc30, Ruggedcom Ros Rmc40, Ruggedcom Ros Rmc41, Ruggedcom Ros Rmc8388, Ruggedcom Ros Rp110, Ruggedcom Ros Rs400, Ruggedcom Ros Rs401, Ruggedcom Ros Rs416, Ruggedcom Ros Rs416v2, Ruggedcom Ros Rs900, Ruggedcom Ros Rs900g, Ruggedcom Ros Rs900gp, Ruggedcom Ros Rs900l, Ruggedcom Ros Rs900w, Ruggedcom Ros Rs910, Ruggedcom Ros Rs910l, Ruggedcom Ros Rs910w, Ruggedcom Ros Rs920l, Ruggedcom Ros Rs920w, Ruggedcom Ros Rs930l, Ruggedcom Ros Rs930w, Ruggedcom Ros Rs940g, Ruggedcom Ros Rs969, Ruggedcom Ros Rs8000, Ruggedcom Ros Rs8000a, Ruggedcom Ros Rs8000h, Ruggedcom Ros Rs8000t, Ruggedcom Ros Rsg900, Ruggedcom Ros Rsg900c, Ruggedcom Ros Rsg900g, Ruggedcom Ros Rsg900r, Ruggedcom Ros Rsg920p, Ruggedcom Ros Rsg2100, Ruggedcom Ros Rsg2100p, Ruggedcom Ros Rsg2200, Ruggedcom Ros Rsg2288, Ruggedcom Ros Rsg2300, Ruggedcom Ros Rsg2300p, Ruggedcom Ros Rsg2488, Ruggedcom Ros Rsl910, Ruggedcom Ros Rst916c, Ruggedcom Ros Rst916p, Ruggedcom Ros Rst2228

52 products

Ruggedcom Ros Rmc8388

Ruggedcom Ros Rs416v2

Ruggedcom Ros Rs900

Ruggedcom Ros Rs900g

Ruggedcom Ros Rs900gp

Ruggedcom Ros Rs8000a

Ruggedcom Ros Rs8000h

Ruggedcom Ros Rs8000t

Ruggedcom Ros Rsg900

Ruggedcom Ros Rsg900c

Ruggedcom Ros Rsg900g

Ruggedcom Ros Rsg900r

Ruggedcom Ros Rsg920p

Ruggedcom Ros Rsg2100

Ruggedcom Ros Rsg2100p

Ruggedcom Ros Rsg2200

Ruggedcom Ros Rsg2288

Ruggedcom Ros Rsg2300

Ruggedcom Ros Rsg2300p

Ruggedcom Ros Rsg2488

Ruggedcom Ros Rsl910

Ruggedcom Ros Rst916c

Ruggedcom Ros Rst916p

Ruggedcom Ros Rst2228

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros I800	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom I800	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros I801	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom I801	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros I802	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom I802	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros I803	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom I803	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros M969	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom M969	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros M2100	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom M2100	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros M2200	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom M2200	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rmc	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rmc	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rmc20	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rmc20	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rmc30	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rmc30	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rmc40	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rmc40	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rmc41	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rmc41	All versions

Configuration M

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rmc8388	Before 4.3.7
Siemens Ruggedcom Ros Rmc8388	From 5.0.0 to 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rmc8388	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rp110	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rp110	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs400	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs400	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs401	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs401	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs416	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs416	All versions

Configuration R

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs416v2	Before 4.3.7
Siemens Ruggedcom Ros Rs416v2	From 5.5.0 to 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rs416v2	All versions

Configuration S

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs900	Before 4.3.7
Siemens Ruggedcom Ros Rs900	From 5.0.0 to 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rs900	All versions

Configuration T

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs900g	Before 4.3.7
Siemens Ruggedcom Ros Rs900g	From 5.0.0 to 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rs900g	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs900gp	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs900gp	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs900l	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs900l	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs900w	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs900w	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs910	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs910	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs910l	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs910l	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs910w	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs910w	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs920l	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs920l	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs920w	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs920w	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs930l	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs930l	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs930w	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs930w	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs940g	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs940g	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs969	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs969	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs8000	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs8000	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs8000a	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs8000a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs8000h	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs8000h	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rs8000t	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rs8000t	All versions

Configuration K

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsg900	Before 4.3.7
Siemens Ruggedcom Ros Rsg900	From 5.5.0 to 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rsg900	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsg900c	Before 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rsg900c	All versions

Configuration M

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsg900g	Before 4.3.7
Siemens Ruggedcom Ros Rsg900g	From 5.0.0 to 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rsg900g	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsg900r	Before 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rsg900r	All versions

Configuration O

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsg920p	Before 4.3.7
Siemens Ruggedcom Ros Rsg920p	From 5.0.0 to 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rsg920p	All versions

Configuration P

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsg2100	Before 4.3.7
Siemens Ruggedcom Ros Rsg2100	From 5.0.0 to 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rsg2100	All versions

Configuration Q

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsg2100p	Before 4.3.7
Siemens Ruggedcom Ros Rsg2100p	From 5.0.0 to 5.3.4

Running on/with	Platform Versions
Siemens Ruggedcom Rsg2100p	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsg2200	Before 4.3.7

Running on/with	Platform Versions
Siemens Ruggedcom Rsg2200	All versions

Configuration S

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsg2288	Before 4.3.7
Siemens Ruggedcom Ros Rsg2288	From 5.0.0 to 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rsg2288	All versions

Configuration T

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsg2300	Before 4.3.7
Siemens Ruggedcom Ros Rsg2300	From 5.0.0 to 5.3.4

Running on/with	Platform Versions
Siemens Ruggedcom Rsg2300	All versions

Configuration U

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsg2300p	Before 4.3.7
Siemens Ruggedcom Ros Rsg2300p	From 5.5.0 to 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rsg2300p	All versions

Configuration V

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsg2488	Before 4.3.7
Siemens Ruggedcom Ros Rsg2488	From 5.0.0 to 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rsg2488	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rsl910	Before 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rsl910	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rst916c	Before 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rst916c	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rst916p	Before 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rst916p	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Ros Rst2228	Before 5.5.4

Running on/with	Platform Versions
Siemens Ruggedcom Rst2228	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

https://cert-portal.siemens.com/productcert/html/ssa-373591.html

Source: productcert@siemens.com

https://cert-portal.siemens.com/productcert/pdf/ssa-373591.pdf

Source: productcert@siemens.com

Vendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-373591.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.