PT-2021-6891 · Siemens+1 · Desigo Pxc128-U+22

Published 2021-11-09 · Updated 2022-05-20 · CVE-2021-31885

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions APOGEE MBC (PPC) (BACnet) versions prior to V3.5.4 APOGEE MBC (PPC) (P2 Ethernet) versions prior to V2.8.19 APOGEE MEC (PPC) (BACnet) versions prior to V3.5.4 APOGEE MEC (PPC) (P2 Ethernet) versions prior to V2.8.19 APOGEE PXC Compact (BACnet) versions prior to V3.5.4 APOGEE PXC Compact (P2 Ethernet) versions prior to V2.8.19 APOGEE PXC Modular (BACnet) versions prior to V3.5.4 APOGEE PXC Modular (P2 Ethernet) versions prior to V2.8.19 Desigo PXC00-E.D versions prior to V6.30.016 Desigo PXC00-U versions prior to V6.30.016 Desigo PXC001-E.D versions prior to V6.30.016 Desigo PXC100-E.D versions prior to V6.30.016 Desigo PXC12-E.D versions prior to V6.30.016 Desigo PXC128-U versions prior to V6.30.016 Desigo PXC200-E.D versions prior to V6.30.016 Desigo PXC22-E.D versions prior to V6.30.016 Desigo PXC22.1-E.D versions prior to V6.30.016 Desigo PXC36.1-E.D versions prior to V6.30.016 Desigo PXC50-E.D versions prior to V6.30.016 Desigo PXC64-U versions prior to V6.30.016 Desigo PXM20-E versions prior to V6.30.016 Nucleus NET versions prior to V2017.02.4 Nucleus ReadyStart V3 versions prior to V2017.02.4 Nucleus ReadyStart V4 versions prior to V4.1.1 Nucleus Source Code versions prior to V2017.02.4 PLUSCONTROL 1st Gen versions prior to V2017.02.4 TALON TC Compact (BACnet) versions prior to V3.5.4 TALON TC Modular (BACnet) versions prior to V3.5.4

Description The issue is related to a TFTP server application that allows for reading the contents of the TFTP memory buffer via sending malformed TFTP commands. This can be exploited by a remote attacker to gain access to protected information.

Recommendations For APOGEE MBC (PPC) (BACnet) versions prior to V3.5.4, update to version V3.5.4 or later. For APOGEE MBC (PPC) (P2 Ethernet) versions prior to V2.8.19, update to version V2.8.19 or later. For APOGEE MEC (PPC) (BACnet) versions prior to V3.5.4, update to version V3.5.4 or later. For APOGEE MEC (PPC) (P2 Ethernet) versions prior to V2.8.19, update to version V2.8.19 or later. For APOGEE PXC Compact (BACnet) versions prior to V3.5.4, update to version V3.5.4 or later. For APOGEE PXC Compact (P2 Ethernet) versions prior to V2.8.19, update to version V2.8.19 or later. For APOGEE PXC Modular (BACnet) versions prior to V3.5.4, update to version V3.5.4 or later. For APOGEE PXC Modular (P2 Ethernet) versions prior to V2.8.19, update to version V2.8.19 or later. For Desigo PXC00-E.D versions prior to V6.30.016, update to version V6.30.016 or later. For Desigo PXC00-U versions prior to V6.30.016, update to version V6.30.016 or later. For Desigo PXC001-E.D versions prior to V6.30.016, update to version V6.30.016 or later. For Desigo PXC100-E.D versions prior to V6.30.016, update to version V6.30.016 or later. For Desigo PXC12-E.D versions prior to V6.30.016, update to version V6.30.016 or later. For Desigo PXC128-U versions prior to V6.30.016, update to version V6.30.016 or later. For Desigo PXC200-E.D versions prior to V6.30.016, update to version V6.30.016 or later. For Desigo PXC22-E.D versions prior to V6.30.016, update to version V6.30.016 or later. For Desigo PXC22.1-E.D versions prior to V6.30.016, update to version V6.30.016 or later. For Desigo PXC36.1-E.D versions prior to V6.30.016, update to version V6.30.016 or later. For Desigo PXC50-E.D versions prior to V6.30.016, update to version V6.30.016 or later. For Desigo PXC64-U versions prior to V6.30.016, update to version V6.30.016 or later. For Desigo PXM20-E versions prior to V6.30.016, update to version V6.30.016 or later. For Nucleus NET versions prior to V2017.02.4, update to version V2017.02.4 or later. For Nucleus ReadyStart V3 versions prior to V2017.02.4, update to version V2017.02.4 or later. For Nucleus ReadyStart V4 versions prior to V4.1.1, update to version V4.1.1 or later. For Nucleus Source Code versions prior to V2017.02.4, update to version V2017.02.4 or later. For PLUSCONTROL 1st Gen versions prior to V2017.02.4, update to version V2017.02.4 or later. For TALON TC Compact (BACnet) versions prior to V3.5.4, update to version V3.5.4 or later. For TALON TC Modular (BACnet) versions prior to V3.5.4, update to version V3.5.4 or later.

Fix

Weakness Enumeration

CWE-805

Related Identifiers

BDU:2022-02446

CVE-2021-31885

Affected Products

Apogee Mec (Ppc)

Apogee Pxc Compact

Apogee Pxc Modular

Desigo Pxc00-E.D

Desigo Pxc00-U

Desigo Pxc001-E.D

Desigo Pxc100-E.D

Desigo Pxc12-E.D

Desigo Pxc128-U

Desigo Pxc200-E.D

Desigo Pxc22-E.D

Desigo Pxc22.1-E.D

Desigo Pxc36.1-E.D

Desigo Pxc50-E.D

Desigo Pxc64-U

Desigo Pxm20-E

Nucleus Net

Nucleus Readystart V3

Nucleus Readystart V4

Nucleus Source Code

Pluscontrol 1St Gen

Talon Tc Compact

Talon Tc Modular

References · 7

• https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31885 · Security Note
• https://bdu.fstec.ru/vul/2022-02446 · Security Note
• https://osv.dev/vulnerability/CVE-2021-31885 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf · Vendor Advisory
• https://t.me/cibsecurity/32044 · Telegram Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf · Note