PT-2021-16740 · Siemens · Scalance W780+1

Published 2021-02-09 · Updated 2021-02-12 · CVE-2021-25666

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions SCALANCE W780 and W740 (IEEE 802.11n) family versions prior to V6.3

Description A vulnerability has been identified that could cause a partial denial-of-service when specially crafted packets are sent through the ARP protocol to an affected device, preventing it from operating normally for a short period of time.

Recommendations For versions prior to V6.3, update to version V6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the ARP protocol to minimize the risk of exploitation.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2021-25666

Affected Products

Scalance W740

Scalance W780

References · 4

• https://cert-portal.siemens.com/productcert/pdf/ssa-686152.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25666 · Security Note
• https://osv.dev/vulnerability/CVE-2021-25666 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-040-07 · Note