CVE-2021-25676CWE-307

CVE-2021-25676: vulnerability in Siemens RUGGEDCOM RM1224

Published · Updated

Follow this CVE+ Monitor SCALANCE SC-600+ Monitor RUGGEDCOM RM1224

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.
Affected products
Siemens · RUGGEDCOM RM1224Siemens · SCALANCE M-800Siemens · SCALANCE S615Siemens · SCALANCE SC-600
Related CVEs — Siemens RUGGEDCOM RM1224

In the same product, most dangerous first.

CVE-2021-25667MEDIUMCVE-2021-25667EPSS 0.9%