PT-2021-7788 · Siemens · Scalance M-800+8

Published 2021-03-09 · Updated 2022-10-19 · CVE-2021-25667

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RUGGEDCOM RM1224 versions 4.3 through 6.3 SCALANCE M-800 versions 4.3 through 6.3 SCALANCE S615 versions 4.3 through 6.3 SCALANCE SC-600 Family versions 2.0 through 2.1.2 SCALANCE XB-200 versions prior to 4.1 SCALANCE XC-200 versions prior to 4.1 SCALANCE XF-200BA versions prior to 4.1 SCALANCE XM400 versions prior to 6.2 SCALANCE XP-200 versions prior to 4.1 SCALANCE XR-300WG versions prior to 4.1 SCALANCE XR500 versions prior to 6.2

Description The issue is caused by a stack-based buffer overflow vulnerability in the handling of STP BPDU frames. This could allow a remote attacker to trigger a denial-of-service condition or potentially execute remote code. Successful exploitation requires the passive listening feature of the device to be active.

Recommendations For RUGGEDCOM RM1224 versions 4.3 through 6.3, update to version 6.4 or later. For SCALANCE M-800 versions 4.3 through 6.3, update to version 6.4 or later. For SCALANCE S615 versions 4.3 through 6.3, update to version 6.4 or later. For SCALANCE SC-600 Family versions 2.0 through 2.1.2, update to version 2.1.3 or later. For SCALANCE XB-200 versions prior to 4.1, update to version 4.1 or later. For SCALANCE XC-200 versions prior to 4.1, update to version 4.1 or later. For SCALANCE XF-200BA versions prior to 4.1, update to version 4.1 or later. For SCALANCE XM400 versions prior to 6.2, update to version 6.2 or later. For SCALANCE XP-200 versions prior to 4.1, update to version 4.1 or later. For SCALANCE XR-300WG versions prior to 4.1, update to version 4.1 or later. For SCALANCE XR500 versions prior to 6.2, update to version 6.2 or later.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

BDU:2023-02903

CVE-2021-25667

Affected Products

Ruggedcom Rm1224

Scalance M-800

Scalance S615

Scalance Sc-600 Family

Scalance X-200

Scalance Xf-200Ba

Scalance Xm-400

Scalance Xr-300Wg

Scalance Xr-500

References · 7

• https://us-cert.cisa.gov/ics/advisories/icsa-21-068-03 · Patch
• https://cert-portal.siemens.com/productcert/pdf/ssa-979775.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25667 · Security Note
• https://bdu.fstec.ru/vul/2023-02903 · Security Note
• https://osv.dev/vulnerability/CVE-2021-25667 · Vendor Advisory
• https://cisa.gov/news-events/ics-advisories/icsa-21-068-03 · Note
• https://vuldb.com/?id.171293 · Note