PT-2021-7787 · Siemens · Scalance X201-3P Irt+20

Published 2021-04-13 · Updated 2022-05-13 · CVE-2021-25669

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SCALANCE X200-4P IRT versions prior to 5.5.1 SCALANCE X201-3P IRT versions prior to 5.5.1 SCALANCE X201-3P IRT PRO versions prior to 5.5.1 SCALANCE X202-2 IRT versions prior to 5.5.1 SCALANCE X202-2P IRT versions prior to 5.5.1 SCALANCE X202-2P IRT PRO versions prior to 5.5.1 SCALANCE X204 IRT versions prior to 5.5.1 SCALANCE X204 IRT PRO versions prior to 5.5.1 SCALANCE X204-2 versions prior to V5.2.5 SCALANCE X204-2FM versions prior to V5.2.5 SCALANCE X204-2LD versions prior to V5.2.5 SCALANCE X204-2LD TS versions prior to V5.2.5 SCALANCE X204-2TS versions prior to V5.2.5 SCALANCE X206-1 versions prior to V5.2.5 SCALANCE X206-1LD versions prior to V5.2.5 SCALANCE X208 versions prior to V5.2.5 SCALANCE X208PRO versions prior to V5.2.5 SCALANCE X212-2 versions prior to V5.2.5 SCALANCE X212-2LD versions prior to V5.2.5 SCALANCE X216 versions prior to V5.2.5 SCALANCE X224 versions prior to V5.2.5 SCALANCE XF201-3P IRT versions prior to 5.5.1 SCALANCE XF202-2P IRT versions prior to 5.5.1 SCALANCE XF204 versions prior to V5.2.5 SCALANCE XF204 IRT versions prior to 5.5.1 SCALANCE XF204-2 versions prior to V5.2.5 SCALANCE XF204-2BA IRT versions prior to 5.5.1 SCALANCE XF206-1 versions prior to V5.2.5 SCALANCE XF208 versions prior to V5.2.5

Description The issue is caused by incorrect processing of POST requests in the web server, which may lead to a stack-based buffer overflow. This could allow an attacker to cause a denial-of-service or achieve remote code execution.

Recommendations As a temporary workaround, consider disabling the web server functionality until a patch is available. Restrict access to the web server to minimize the risk of exploitation. Avoid using the vulnerable web server until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

BDU:2023-02902

CVE-2021-25669

Affected Products

Scalance X200-4P Irt

Scalance X201-3P Irt

Scalance X201-3P Irt Pro

Scalance X202-2P Irt

Scalance X204Irt

Scalance X204Irt Pro

Scalance X204-2Ld

Scalance X204-2Fm

Scalance X204-2Ld Ts

Scalance X204-2Ts

Scalance X206-1Ld

Scalance X208

Scalance X208Pro

Scalance X212-2Ld

Scalance X216

Scalance X224

Scalance Xf204

Scalance Xf204-2

Scalance Xf204-2Ba Irt

Scalance Xf206-1

Scalance Xf208

References · 6

• https://bdu.fstec.ru/vul/2023-02902 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25669 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25669 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-21-103-07 · Note
• https://vuldb.com/?id.173775 · Note