CVE-2021-25668

🗓️ 22 Apr 2021 20:42:20Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 62 Views

SCALANCE X series devices < 5.5.1, X204-2 & X208PRO < V5.2.5 - Heap write out of bounds vulnerabilit

Reporter	Title	Published	Views	Family All 12
CNNVD	Siemens Web Server缓冲区错误漏洞	13 Apr 202100:00	–	cnnvd
CNVD	Siemens SCALANCE X-200 Web Server Heap Buffer Overflow Vulnerability	13 Apr 202100:00	–	cnvd
Cvelist	CVE-2021-25668	22 Apr 202120:42	–	cvelist
EUVD	EUVD-2021-12560	7 Oct 202500:30	–	euvd
ICS	Siemens Web Server of SCALANCE X200 (Update A)	13 Apr 202100:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	13 Apr 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in Siemens products.	14 Sep 202100:00	–	ncsc
NVD	CVE-2021-25668	22 Apr 202121:15	–	nvd
OSV	CVE-2021-25668	22 Apr 202121:15	–	osv
Prion	Out-of-bounds	22 Apr 202121:15	–	prion

NVD

Node

siemens scalance_x200-4p_irt_firmwareRange<5.5.1

AND

siemens scalance_x200-4p_irtMatch-

Node

siemens scalance_x201-3p_irt_firmwareRange<5.5.1

AND

siemens scalance_x201-3p_irtMatch-

Node

siemens scalance_x201-3p_irt_pro_firmwareRange<5.5.1

AND

siemens scalance_x201-3p_irt_proMatch-

Node

siemens scalance_x202-2_irt_firmwareRange<5.5.1

AND

siemens scalance_x202-2_irtMatch-

Node

siemens scalance_x202-2p_irt_pro_firmwareRange<5.5.1

AND

siemens scalance_x202-2p_irt_proMatch-

Node

siemens scalance_x204_irt_firmwareRange<5.5.1

AND

siemens scalance_x204_irtMatch-

Node

siemens scalance_x204_irt_pro_firmwareRange<5.5.1

AND

siemens scalance_x204_irt_proMatch-

Node

siemens scalance_x204-2_firmwareRange<5.2.5

AND

siemens scalance_x204-2Match-

Node

siemens scalance_x204-2fm_firmwareRange<5.2.5

AND

siemens scalance_x204-2fmMatch-

Node

siemens scalance_x204-2ld_firmwareRange<5.2.5

AND

siemens scalance_x204-2ldMatch-

Node

siemens scalance_x204-2ld_ts_firmwareRange<5.2.5

AND

siemens scalance_x204-2ld_tsMatch-

Node

siemens scalance_x204-2ts_firmwareRange<5.2.5

AND

siemens scalance_x204-2tsMatch-

Node

siemens scalance_x206-1_firmwareRange<5.2.5

AND

siemens scalance_x206-1Match-

Node

siemens scalance_x206-1ld_firmwareRange<5.2.5

AND

siemens scalance_x206-1ldMatch-

Node

siemens scalance_x208_firmwareRange<5.2.5

AND

siemens scalance_x208Match-

Node

siemens scalance_x208pro_firmwareRange<5.2.5

AND

siemens scalance_x208proMatch-

Node

siemens scalance_x212-2_firmwareRange<5.2.5

AND

siemens scalance_x212-2Match-

Node

siemens scalance_x212-2ld_firmwareRange<5.2.5

AND

siemens scalance_x212-2ldMatch-

Node

siemens scalance_x216_firmwareRange<5.2.5

AND

siemens scalance_x216Match-

Node

siemens scalance_x224_firmwareRange<5.2.5

AND

siemens scalance_x224Match-

Node

siemens scalance_xf201-3p_irt_firmwareRange<5.5.1

AND

siemens scalance_xf201-3p_irtMatch-

Node

siemens scalance_xf202-2p_irt_firmwareRange<5.5.1

AND

siemens scalance_xf202-2p_irtMatch-

Node

siemens scalance_xf204_firmwareRange<5.2.5

AND

siemens scalance_xf204Match-

Node

siemens scalance_xf204_irt_firmwareRange<5.5.1

AND

siemens scalance_xf204_irtMatch-

Node

siemens scalance_xf204-2_firmwareRange<5.2.5

AND

siemens scalance_xf204-2Match-

Node

siemens scalance_xf204-2ba_irt_firmwareRange<5.5.1

AND

siemens scalance_xf204-2ba_irtMatch-

Node

siemens scalance_xf206-1_firmwareRange<5.2.5

AND

siemens scalance_xf206-1Match-

Node

siemens scalance_xf208_firmwareRange<5.2.5

AND

siemens scalance_xf208Match-

Node

siemens scalance_x202-2p_irt_firmwareRange<5.5.1

AND

siemens scalance_x202-2p_irtMatch-

[
  {
    "product": "SCALANCE X200-4P IRT",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 5.5.1"
      }
    ]
  },
  {
    "product": "SCALANCE X201-3P IRT",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 5.5.1"
      }
    ]
  },
  {
    "product": "SCALANCE X201-3P IRT PRO",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 5.5.1"
      }
    ]
  },
  {
    "product": "SCALANCE X202-2 IRT",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 5.5.1"
      }
    ]
  },
  {
    "product": "SCALANCE X202-2P IRT (incl. SIPLUS NET variant)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 5.5.1"
      }
    ]
  },
  {
    "product": "SCALANCE X202-2P IRT PRO",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 5.5.1"
      }
    ]
  },
  {
    "product": "SCALANCE X204 IRT",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 5.5.1"
      }
    ]
  },
  {
    "product": "SCALANCE X204 IRT PRO",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 5.5.1"
      }
    ]
  },
  {
    "product": "SCALANCE X204-2 (incl. SIPLUS NET variant)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X204-2FM",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X204-2LD (incl. SIPLUS NET variant)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X204-2LD TS",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X204-2TS",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X206-1",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X206-1LD",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X208 (incl. SIPLUS NET variant)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X208PRO",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X212-2 (incl. SIPLUS NET variant)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X212-2LD",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X216",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE X224",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE XF201-3P IRT",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 5.5.1"
      }
    ]
  },
  {
    "product": "SCALANCE XF202-2P IRT",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 5.5.1"
      }
    ]
  },
  {
    "product": "SCALANCE XF204",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE XF204 IRT",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 5.5.1"
      }
    ]
  },
  {
    "product": "SCALANCE XF204-2 (incl. SIPLUS NET variant)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE XF204-2BA IRT",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 5.5.1"
      }
    ]
  },
  {
    "product": "SCALANCE XF206-1",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  },
  {
    "product": "SCALANCE XF208",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.5"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf

21 Nov 2024 05:55Current

9.2High risk

Vulners AI Score9.2

CVSS 27.5

CVSS 3.19.8

EPSS0.01284

vulnerability scalance x series device security denial-of-service remote code execution nvd cve-2021-25668