CVE-2021-31345highCWE-1284

CVE-2021-31345: high-severity vulnerability in Siemens Capital Embedded AR Classic 431-422

Published · Updated

Follow this CVE+ Monitor Capital Embedded AR Classic+ Monitor Capital Embedded AR Classic R20-11

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 1.6%
In short

A flaw in Capital Embedded AR Classic and PLUSCONTROL fails to validate the total length of UDP data packets, allowing attackers to send malformed packets that can expose sensitive information or crash the system.

Technical detail

The vulnerability exists in UDP payload length validation within the IP header; remote attackers can send crafted UDP packets with invalid length fields to trigger information disclosure or denial-of-service conditions in dependent applications. Exploitation requires network access to the affected device and depends on the specific application layer implementation.

Summary generated and translated by AI from the official description.
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions). The total length of an UDP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on a user-defined applications that runs on top of the UDP protocol. (FSMD-2021-0006)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Siemens · Capital Embedded AR Classic 431-422Siemens · Capital Embedded AR Classic R20-11Siemens · PLUSCONTROL 1st Gen
Related CVEs — Siemens Capital Embedded AR Classic 431-422

In the same product, most dangerous first.

CVE-2021-31890HIGHCVE-2021-31890EPSS 2.2%CVE-2021-31889HIGHCVE-2021-31889EPSS 2.2%CVE-2021-31346HIGHCVE-2021-31346EPSS 2.0%CVE-2021-25664HIGHCVE-2021-25664EPSS 1.9%CVE-2021-25663HIGHCVE-2021-25663EPSS 1.9%CVE-2021-31883HIGHCVE-2021-31883EPSS 1.5%