Vulnerability · Published Mar 15, 2021 · Assigned by siemens

CVE-2021-25667

Medium 6.5

In plain English

A medium-severity stack buffer overflow in RUGGEDCOM RM1224 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.9%top 38.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < V4.1), SCALANCE XR500 (All versions < V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.

Affected products (as reported)

Vendor	Product	Versions
Siemens	RUGGEDCOM RM1224	All versions >= V4.3 and < V6.4
Siemens	SCALANCE M-800	All versions >= V4.3 and < V6.4
Siemens	SCALANCE S615	All versions >= V4.3 and < V6.4
Siemens	SCALANCE SC-600 Family	All versions >= V2.0 and < V2.1.3
Siemens	SCALANCE XB-200	All versions < V4.1
Siemens	SCALANCE XC-200	All versions < V4.1
Siemens	SCALANCE XF-200BA	All versions < V4.1
Siemens	SCALANCE XM400	All versions < V6.2
Siemens	SCALANCE XP-200	All versions < V4.1
Siemens	SCALANCE XR-300WG	All versions < V4.1
Siemens	SCALANCE XR500	All versions < V6.2

Weakness: CWE-121 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://cert-portal.siemens.com/productcert/pdf/ssa-979775.pdf x_refsource_MISC
https://us-cert.cisa.gov/ics/advisories/icsa-21-068-03 x_refsource_MISC