PT-2021-7827 · Unknown · Capital Embedded Ar Classic 431-422+1

Published 2021-11-09 · Updated 2024-10-08 · CVE-2021-31881

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Capital Embedded AR Classic 431-422 versions all Capital Embedded AR Classic R20-11 versions prior to V2303

Description A Denial-of-Service condition can occur due to the DHCP client application not validating the length of the Vendor option(s) when processing a DHCP OFFER message. The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to cause a denial of service.

Recommendations For Capital Embedded AR Classic 431-422, update to a version that includes the fix for this issue. For Capital Embedded AR Classic R20-11 versions prior to V2303, update to version V2303 or later to resolve the issue. As a temporary workaround, consider restricting access to the DHCP client application until a patch is available.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2023-03410

CVE-2021-31881

Affected Products

Capital Embedded Ar Classic 431-422

Capital Embedded Ar Classic R20-11

References · 11

• https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31881 · Security Note
• https://bdu.fstec.ru/vul/2023-03410 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-31881 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf · Note
• https://cert-portal.siemens.com/productcert/html/ssa-620288.html · Note
• https://cert-portal.siemens.com/productcert/html/ssa-044112.html · Note
• https://vuldb.com/ru/?id.186346 · Note
• https://cert-portal.siemens.com/productcert/html/ssa-114589.html · Note
• https://cisa.gov/news-events/ics-advisories/icsa-21-350-06 · Note