CVE-2021-31344
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). ICMP echo packets with fake IP options allow sending ICMP echo reply messages to arbitrary hosts on the network. (FSMD-2021-0004)
CVSS score5.3 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NWeakness type (CWE)CWE-843
Vendorssiemens
Affected products
| Vendors | Prodotto | Versioni |
|---|---|---|
| siemens | capital vstar | — |
| siemens | nucleus net | — |
| siemens | nucleus readystart v3 | < 2017.02.1 |
| siemens | nucleus readystart v4 | < 4.1.1 |
| siemens | nucleus source code | — |
| siemens | apogee modular building controller firmware | — |
| siemens | apogee modular building controller | - |
| siemens | apogee modular equiment controller firmware | — |
| siemens | apogee modular equiment controller | - |
| siemens | apogee pxc compact firmware | — |
| siemens | apogee pxc compact | - |
| siemens | apogee pxc modular firmware | — |
| siemens | apogee pxc modular | - |
| siemens | talon tc compact firmware | — |
| siemens | talon tc compact | - |
| siemens | talon tc modular firmware | — |
| siemens | talon tc modular | - |
Related articles
This product uses the NVD API but is not endorsed or certified by the NVD.