CVE-2021-31345

CVSS 7.5 HIGHEPSS 1.6%CWE-1284

In short

A flaw in Capital Embedded AR Classic and PLUSCONTROL fails to validate the total length of UDP data packets, allowing attackers to send malformed packets that can expose sensitive information or crash the system.

Technical detail

The vulnerability exists in UDP payload length validation within the IP header; remote attackers can send crafted UDP packets with invalid length fields to trigger information disclosure or denial-of-service conditions in dependent applications. Exploitation requires network access to the affected device and depends on the specific application layer implementation.

Summary generated and translated by AI from the official description.

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions). The total length of an UDP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on a user-defined applications that runs on top of the UDP protocol. (FSMD-2021-0006)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Siemens · Capital Embedded AR Classic 431-422 Siemens · Capital Embedded AR Classic R20-11 Siemens · PLUSCONTROL 1st Gen

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References