Vulnerability-Lookup

CNVD-2021-28700

Vulnerability from cnvd - Published: 2021-04-15

Title

Siemens SCALANCE X-200 Web服务器堆缓冲区溢出漏洞

Description

Siemens SCALANCE X switches用于连接工业组件，如可编程逻辑控制器（PLC）或人机接口（HMI）。 Siemens SCALANCE X-200 Web服务器存在堆缓冲区溢出漏洞。攻击者可利用漏洞在设备上造成拒绝服务，并可能远程执行代码。

Severity

高

Patch Name

Siemens SCALANCE X-200 Web服务器堆缓冲区溢出漏洞的补丁

Patch Description

Siemens SCALANCE X switches用于连接工业组件，如可编程逻辑控制器（PLC）或人机接口（HMI）。 Siemens SCALANCE X-200 Web服务器存在堆缓冲区溢出漏洞。攻击者可利用漏洞在设备上造成拒绝服务，并可能远程执行代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf

Reference

https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf

Impacted products

Name
['Siemens SCALANCE X200-4P IRT < 5.5.1', 'Siemens SCALANCE X201-3P IRT < 5.5.1', 'Siemens SCALANCE X201-3P IRT PRO < 5.5.1', 'Siemens SCALANCE X202-2 IRT < 5.5.1', 'Siemens SCALANCE X202-2P IRT (incl. SIPLUS NET vari-ant) < 5.5.1', 'Siemens SCALANCE X202-2P IRT PRO < 5.5.1', 'Siemens SCALANCE X204 IRT < 5.5.1', 'Siemens SCALANCE X204 IRT PRO < 5.5.1', 'Siemens SCALANCE X204-2 (incl. SIPLUS NET variant)', 'Siemens SCALANCE X204-2FM', 'Siemens SCALANCE XF206-1', 'Siemens SCALANCE XF208', 'Siemens SCALANCE X204-2LD (incl. SIPLUS NET vari-ant)', 'Siemens SCALANCE X204-2LD TS', 'Siemens SCALANCE X204-2TS', 'Siemens SCALANCE X206-1', 'Siemens SCALANCE X206-1LD', 'Siemens SCALANCE X208 (incl. SIPLUS NET variant)', 'Siemens SCALANCE X208PRO', 'Siemens SCALANCE X212-2 (incl. SIPLUS NET variant)', 'Siemens SCALANCE X212-2LD', 'Siemens SCALANCE X216', 'Siemens SCALANCE X224', 'Siemens SCALANCE XF201-3P IRT < 5.5.1', 'Siemens SCALANCE XF202-2P IRT < 5.5.1', 'Siemens SCALANCE XF204', 'Siemens SCALANCE XF204 IRT < 5.5.1', 'Siemens SCALANCE XF204-2BA IRT < 5.5.1']

Name

['Siemens SCALANCE X200-4P IRT < 5.5.1', 'Siemens SCALANCE X201-3P IRT < 5.5.1', 'Siemens SCALANCE X201-3P IRT PRO < 5.5.1', 'Siemens SCALANCE X202-2 IRT < 5.5.1', 'Siemens SCALANCE X202-2P IRT (incl. SIPLUS NET vari-ant) < 5.5.1', 'Siemens SCALANCE X202-2P IRT PRO < 5.5.1', 'Siemens SCALANCE X204 IRT < 5.5.1', 'Siemens SCALANCE X204 IRT PRO < 5.5.1', 'Siemens SCALANCE X204-2 (incl. SIPLUS NET variant)', 'Siemens SCALANCE X204-2FM', 'Siemens SCALANCE XF206-1', 'Siemens SCALANCE XF208', 'Siemens SCALANCE X204-2LD (incl. SIPLUS NET vari-ant)', 'Siemens SCALANCE X204-2LD TS', 'Siemens SCALANCE X204-2TS', 'Siemens SCALANCE X206-1', 'Siemens SCALANCE X206-1LD', 'Siemens SCALANCE X208 (incl. SIPLUS NET variant)', 'Siemens SCALANCE X208PRO', 'Siemens SCALANCE X212-2 (incl. SIPLUS NET variant)', 'Siemens SCALANCE X212-2LD', 'Siemens SCALANCE X216', 'Siemens SCALANCE X224', 'Siemens SCALANCE XF201-3P IRT < 5.5.1', 'Siemens SCALANCE XF202-2P IRT < 5.5.1', 'Siemens SCALANCE XF204', 'Siemens SCALANCE XF204 IRT < 5.5.1', 'Siemens SCALANCE XF204-2BA IRT < 5.5.1']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-25668"
    }
  },
  "description": "Siemens SCALANCE X switches\u7528\u4e8e\u8fde\u63a5\u5de5\u4e1a\u7ec4\u4ef6\uff0c\u5982\u53ef\u7f16\u7a0b\u903b\u8f91\u63a7\u5236\u5668\uff08PLC\uff09\u6216\u4eba\u673a\u63a5\u53e3\uff08HMI\uff09\u3002\n \t\nSiemens SCALANCE X-200 Web\u670d\u52a1\u5668\u5b58\u5728\u5806\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u5728\u8bbe\u5907\u4e0a\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff0c\u5e76\u53ef\u80fd\u8fdc\u7a0b\u6267\u884c\u4ee3\u7801\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-28700",
  "openTime": "2021-04-15",
  "patchDescription": "Siemens SCALANCE X switches\u7528\u4e8e\u8fde\u63a5\u5de5\u4e1a\u7ec4\u4ef6\uff0c\u5982\u53ef\u7f16\u7a0b\u903b\u8f91\u63a7\u5236\u5668\uff08PLC\uff09\u6216\u4eba\u673a\u63a5\u53e3\uff08HMI\uff09\u3002\r\n \t\r\nSiemens SCALANCE X-200 Web\u670d\u52a1\u5668\u5b58\u5728\u5806\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u5728\u8bbe\u5907\u4e0a\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff0c\u5e76\u53ef\u80fd\u8fdc\u7a0b\u6267\u884c\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens SCALANCE X-200 Web\u670d\u52a1\u5668\u5806\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SCALANCE X200-4P IRT \u003c 5.5.1",
      "Siemens SCALANCE X201-3P IRT \u003c 5.5.1",
      "Siemens SCALANCE X201-3P IRT PRO \u003c 5.5.1",
      "Siemens SCALANCE X202-2 IRT \u003c 5.5.1",
      "Siemens SCALANCE X202-2P IRT (incl. SIPLUS NET vari-ant) \u003c 5.5.1",
      "Siemens SCALANCE X202-2P IRT PRO \u003c 5.5.1",
      "Siemens SCALANCE X204 IRT \u003c 5.5.1",
      "Siemens SCALANCE X204 IRT PRO \u003c 5.5.1",
      "Siemens SCALANCE X204-2 (incl. SIPLUS NET variant)",
      "Siemens SCALANCE X204-2FM",
      "Siemens SCALANCE XF206-1",
      "Siemens SCALANCE XF208",
      "Siemens SCALANCE X204-2LD (incl. SIPLUS NET vari-ant)",
      "Siemens SCALANCE X204-2LD TS",
      "Siemens SCALANCE X204-2TS",
      "Siemens SCALANCE X206-1",
      "Siemens SCALANCE X206-1LD",
      "Siemens SCALANCE X208 (incl. SIPLUS NET variant)",
      "Siemens SCALANCE X208PRO",
      "Siemens SCALANCE X212-2 (incl. SIPLUS NET variant)",
      "Siemens SCALANCE X212-2LD",
      "Siemens SCALANCE X216",
      "Siemens SCALANCE X224",
      "Siemens SCALANCE XF201-3P IRT \u003c 5.5.1",
      "Siemens SCALANCE XF202-2P IRT \u003c 5.5.1",
      "Siemens SCALANCE XF204",
      "Siemens SCALANCE XF204 IRT \u003c 5.5.1",
      "Siemens SCALANCE XF204-2BA IRT \u003c 5.5.1"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf",
  "serverity": "\u9ad8",
  "submitTime": "2021-04-13",
  "title": "Siemens SCALANCE X-200 Web\u670d\u52a1\u5668\u5806\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e"
}

CVE-2021-25668 (GCVE-0-2021-25668)

Vulnerability from cvelistv5 – Published: 2021-04-22 20:42 – Updated: 2024-08-03 20:11

Summary

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SCALANCE X202-2 IRT (All versions < 5.5.1), SCALANCE X202-2P IRT (incl. SIPLUS NET variant) (All versions < 5.5.1), SCALANCE X202-2P IRT PRO (All versions < 5.5.1), SCALANCE X204 IRT (All versions < 5.5.1), SCALANCE X204 IRT PRO (All versions < 5.5.1), SCALANCE X204-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X204-2FM (All versions < V5.2.5), SCALANCE X204-2LD (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X204-2LD TS (All versions < V5.2.5), SCALANCE X204-2TS (All versions < V5.2.5), SCALANCE X206-1 (All versions < V5.2.5), SCALANCE X206-1LD (All versions < V5.2.5), SCALANCE X208 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X208PRO (All versions < V5.2.5), SCALANCE X212-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X212-2LD (All versions < V5.2.5), SCALANCE X216 (All versions < V5.2.5), SCALANCE X224 (All versions < V5.2.5), SCALANCE XF201-3P IRT (All versions < 5.5.1), SCALANCE XF202-2P IRT (All versions < 5.5.1), SCALANCE XF204 (All versions < V5.2.5), SCALANCE XF204 IRT (All versions < 5.5.1), SCALANCE XF204-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE XF204-2BA IRT (All versions < 5.5.1), SCALANCE XF206-1 (All versions < V5.2.5), SCALANCE XF208 (All versions < V5.2.5). Incorrect processing of POST requests in the webserver may result in write out of bounds in heap. An attacker might leverage this to cause denial-of-service on the device and potentially remotely execute code.

Severity

No CVSS data available.

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

siemens icscert root

References

1 reference

URL	Tags
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_MISC

Impacted products

29 products

Vendor	Product	Version
Siemens	SCALANCE X200-4P IRT	Affected: All versions < 5.5.1
Siemens	SCALANCE X201-3P IRT	Affected: All versions < 5.5.1
Siemens	SCALANCE X201-3P IRT PRO	Affected: All versions < 5.5.1
Siemens	SCALANCE X202-2 IRT	Affected: All versions < 5.5.1
Siemens	SCALANCE X202-2P IRT (incl. SIPLUS NET variant)	Affected: All versions < 5.5.1
Siemens	SCALANCE X202-2P IRT PRO	Affected: All versions < 5.5.1
Siemens	SCALANCE X204 IRT	Affected: All versions < 5.5.1
Siemens	SCALANCE X204 IRT PRO	Affected: All versions < 5.5.1
Siemens	SCALANCE X204-2 (incl. SIPLUS NET variant)	Affected: All versions < V5.2.5
Siemens	SCALANCE X204-2FM	Affected: All versions < V5.2.5
Siemens	SCALANCE X204-2LD (incl. SIPLUS NET variant)	Affected: All versions < V5.2.5
Siemens	SCALANCE X204-2LD TS	Affected: All versions < V5.2.5
Siemens	SCALANCE X204-2TS	Affected: All versions < V5.2.5
Siemens	SCALANCE X206-1	Affected: All versions < V5.2.5
Siemens	SCALANCE X206-1LD	Affected: All versions < V5.2.5
Siemens	SCALANCE X208 (incl. SIPLUS NET variant)	Affected: All versions < V5.2.5
Siemens	SCALANCE X208PRO	Affected: All versions < V5.2.5
Siemens	SCALANCE X212-2 (incl. SIPLUS NET variant)	Affected: All versions < V5.2.5
Siemens	SCALANCE X212-2LD	Affected: All versions < V5.2.5
Siemens	SCALANCE X216	Affected: All versions < V5.2.5
Siemens	SCALANCE X224	Affected: All versions < V5.2.5
Siemens	SCALANCE XF201-3P IRT	Affected: All versions < 5.5.1
Siemens	SCALANCE XF202-2P IRT	Affected: All versions < 5.5.1
Siemens	SCALANCE XF204	Affected: All versions < V5.2.5
Siemens	SCALANCE XF204 IRT	Affected: All versions < 5.5.1
Siemens	SCALANCE XF204-2 (incl. SIPLUS NET variant)	Affected: All versions < V5.2.5
Siemens	SCALANCE XF204-2BA IRT	Affected: All versions < 5.5.1
Siemens	SCALANCE XF206-1	Affected: All versions < V5.2.5
Siemens	SCALANCE XF208	Affected: All versions < V5.2.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T20:11:27.504Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X200-4P IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c 5.5.1"
            }
          ]
        },
        {
          "product": "SCALANCE X201-3P IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c 5.5.1"
            }
          ]
        },
        {
          "product": "SCALANCE X201-3P IRT PRO",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c 5.5.1"
            }
          ]
        },
        {
          "product": "SCALANCE X202-2 IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c 5.5.1"
            }
          ]
        },
        {
          "product": "SCALANCE X202-2P IRT (incl. SIPLUS NET variant)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c 5.5.1"
            }
          ]
        },
        {
          "product": "SCALANCE X202-2P IRT PRO",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c 5.5.1"
            }
          ]
        },
        {
          "product": "SCALANCE X204 IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c 5.5.1"
            }
          ]
        },
        {
          "product": "SCALANCE X204 IRT PRO",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c 5.5.1"
            }
          ]
        },
        {
          "product": "SCALANCE X204-2 (incl. SIPLUS NET variant)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE X204-2FM",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE X204-2LD (incl. SIPLUS NET variant)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE X204-2LD TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE X204-2TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE X206-1",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE X206-1LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE X208 (incl. SIPLUS NET variant)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE X208PRO",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE X212-2 (incl. SIPLUS NET variant)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE X212-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE X216",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE X224",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE XF201-3P IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c 5.5.1"
            }
          ]
        },
        {
          "product": "SCALANCE XF202-2P IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c 5.5.1"
            }
          ]
        },
        {
          "product": "SCALANCE XF204",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE XF204 IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c 5.5.1"
            }
          ]
        },
        {
          "product": "SCALANCE XF204-2 (incl. SIPLUS NET variant)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE XF204-2BA IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c 5.5.1"
            }
          ]
        },
        {
          "product": "SCALANCE XF206-1",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        },
        {
          "product": "SCALANCE XF208",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X200-4P IRT (All versions \u003c 5.5.1), SCALANCE X201-3P IRT (All versions \u003c 5.5.1), SCALANCE X201-3P IRT PRO (All versions \u003c 5.5.1), SCALANCE X202-2 IRT (All versions \u003c 5.5.1), SCALANCE X202-2P IRT (incl. SIPLUS NET variant) (All versions \u003c 5.5.1), SCALANCE X202-2P IRT PRO (All versions \u003c 5.5.1), SCALANCE X204 IRT (All versions \u003c 5.5.1), SCALANCE X204 IRT PRO (All versions \u003c 5.5.1), SCALANCE X204-2 (incl. SIPLUS NET variant) (All versions \u003c V5.2.5), SCALANCE X204-2FM (All versions \u003c V5.2.5), SCALANCE X204-2LD (incl. SIPLUS NET variant) (All versions \u003c V5.2.5), SCALANCE X204-2LD TS (All versions \u003c V5.2.5), SCALANCE X204-2TS (All versions \u003c V5.2.5), SCALANCE X206-1 (All versions \u003c V5.2.5), SCALANCE X206-1LD (All versions \u003c V5.2.5), SCALANCE X208 (incl. SIPLUS NET variant) (All versions \u003c V5.2.5), SCALANCE X208PRO (All versions \u003c V5.2.5), SCALANCE X212-2 (incl. SIPLUS NET variant) (All versions \u003c V5.2.5), SCALANCE X212-2LD (All versions \u003c V5.2.5), SCALANCE X216 (All versions \u003c V5.2.5), SCALANCE X224 (All versions \u003c V5.2.5), SCALANCE XF201-3P IRT (All versions \u003c 5.5.1), SCALANCE XF202-2P IRT (All versions \u003c 5.5.1), SCALANCE XF204 (All versions \u003c V5.2.5), SCALANCE XF204 IRT (All versions \u003c 5.5.1), SCALANCE XF204-2 (incl. SIPLUS NET variant) (All versions \u003c V5.2.5), SCALANCE XF204-2BA IRT (All versions \u003c 5.5.1), SCALANCE XF206-1 (All versions \u003c V5.2.5), SCALANCE XF208 (All versions \u003c V5.2.5). Incorrect processing of POST requests in the webserver may result in write out of bounds in heap. An attacker might leverage this to cause denial-of-service on the device and potentially remotely execute code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-09-14T10:47:23.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2021-25668",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X200-4P IRT",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c 5.5.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X201-3P IRT",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c 5.5.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X201-3P IRT PRO",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c 5.5.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X202-2 IRT",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c 5.5.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X202-2P IRT (incl. SIPLUS NET variant)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c 5.5.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X202-2P IRT PRO",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c 5.5.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X204 IRT",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c 5.5.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X204 IRT PRO",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c 5.5.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X204-2 (incl. SIPLUS NET variant)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X204-2FM",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X204-2LD (incl. SIPLUS NET variant)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X204-2LD TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X204-2TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X206-1",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X206-1LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X208 (incl. SIPLUS NET variant)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X208PRO",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X212-2 (incl. SIPLUS NET variant)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X212-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X216",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X224",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XF201-3P IRT",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c 5.5.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XF202-2P IRT",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c 5.5.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XF204",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XF204 IRT",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c 5.5.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XF204-2 (incl. SIPLUS NET variant)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XF204-2BA IRT",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c 5.5.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XF206-1",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XF208",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V5.2.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X200-4P IRT (All versions \u003c 5.5.1), SCALANCE X201-3P IRT (All versions \u003c 5.5.1), SCALANCE X201-3P IRT PRO (All versions \u003c 5.5.1), SCALANCE X202-2 IRT (All versions \u003c 5.5.1), SCALANCE X202-2P IRT (incl. SIPLUS NET variant) (All versions \u003c 5.5.1), SCALANCE X202-2P IRT PRO (All versions \u003c 5.5.1), SCALANCE X204 IRT (All versions \u003c 5.5.1), SCALANCE X204 IRT PRO (All versions \u003c 5.5.1), SCALANCE X204-2 (incl. SIPLUS NET variant) (All versions \u003c V5.2.5), SCALANCE X204-2FM (All versions \u003c V5.2.5), SCALANCE X204-2LD (incl. SIPLUS NET variant) (All versions \u003c V5.2.5), SCALANCE X204-2LD TS (All versions \u003c V5.2.5), SCALANCE X204-2TS (All versions \u003c V5.2.5), SCALANCE X206-1 (All versions \u003c V5.2.5), SCALANCE X206-1LD (All versions \u003c V5.2.5), SCALANCE X208 (incl. SIPLUS NET variant) (All versions \u003c V5.2.5), SCALANCE X208PRO (All versions \u003c V5.2.5), SCALANCE X212-2 (incl. SIPLUS NET variant) (All versions \u003c V5.2.5), SCALANCE X212-2LD (All versions \u003c V5.2.5), SCALANCE X216 (All versions \u003c V5.2.5), SCALANCE X224 (All versions \u003c V5.2.5), SCALANCE XF201-3P IRT (All versions \u003c 5.5.1), SCALANCE XF202-2P IRT (All versions \u003c 5.5.1), SCALANCE XF204 (All versions \u003c V5.2.5), SCALANCE XF204 IRT (All versions \u003c 5.5.1), SCALANCE XF204-2 (incl. SIPLUS NET variant) (All versions \u003c V5.2.5), SCALANCE XF204-2BA IRT (All versions \u003c 5.5.1), SCALANCE XF206-1 (All versions \u003c V5.2.5), SCALANCE XF208 (All versions \u003c V5.2.5). Incorrect processing of POST requests in the webserver may result in write out of bounds in heap. An attacker might leverage this to cause denial-of-service on the device and potentially remotely execute code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-122: Heap-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2021-25668",
    "datePublished": "2021-04-22T20:42:20.000Z",
    "dateReserved": "2021-01-21T00:00:00.000Z",
    "dateUpdated": "2024-08-03T20:11:27.504Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.