CVE-2021-31345
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions). The total length of an UDP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on a user-defined applications that runs on top of the UDP protocol. (FSMD-2021-0006)
CVSS score7.5 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWeakness type (CWE)CWE-1284
Vendorssiemens
Affected products
| Vendors | Product | Versions |
|---|---|---|
| siemens | capital vstar | — |
| siemens | nucleus net | — |
| siemens | nucleus readystart v3 | < 2014.12 |
| siemens | nucleus source code | — |
| siemens | apogee modular building controller firmware | — |
| siemens | apogee modular building controller | - |
| siemens | apogee modular equiment controller firmware | — |
| siemens | apogee modular equiment controller | - |
| siemens | apogee pxc compact firmware | — |
| siemens | apogee pxc compact | - |
| siemens | apogee pxc modular firmware | — |
| siemens | apogee pxc modular | - |
| siemens | talon tc compact firmware | — |
| siemens | talon tc compact | - |
| siemens | talon tc modular firmware | — |
| siemens | talon tc modular | - |
Related articles
This product uses the NVD API but is not endorsed or certified by the NVD.