PT-2021-16742 · Rwg1.M12+1 · Rwg1.M12+1

Published 2021-07-13 · Updated 2021-08-04 · CVE-2021-25671

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions RWG1.M12 versions prior to V1.16.16 RWG1.M12D versions prior to V1.16.16 RWG1.M8 versions prior to V1.16.16

Description A vulnerability has been identified that could cause a partial denial-of-service when specially crafted ARP packets are sent to an affected device, preventing it from operating normally. A restart is needed to restore normal operations.

Recommendations For RWG1.M12 versions prior to V1.16.16, update to version V1.16.16 or later to resolve the issue. For RWG1.M12D versions prior to V1.16.16, update to version V1.16.16 or later to resolve the issue. For RWG1.M8 versions prior to V1.16.16, update to version V1.16.16 or later to resolve the issue.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2021-25671

Affected Products

Rwg1.M12

Rwg1.M8

References · 3

• https://osv.dev/vulnerability/CVE-2021-25671 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25671 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-448291.pdf · Vendor Advisory