Lucene search

[email protected]CVE-2021-25671

HistoryJul 13, 2021 - 11:15 a.m.

CVE-2021-25671

2021-07-1311:15:09

CWE-770

[email protected]

web.nvd.nist.gov

cve-2021-25671

rwg1.m12

rwg1.m12d

rwg1.m8

arp packets

denial-of-service

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

4.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

4.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

A vulnerability has been identified in RWG1.M12 (All versions < V1.16.16), RWG1.M12D (All versions < V1.16.16), RWG1.M8 (All versions < V1.16.16). Sending specially crafted ARP packets to an affected device could cause a partial denial-of-service, preventing the device to operate normally. A restart is needed to restore normal operations.

Affected configurations

NVD

Node

siemensrwg1.m12_firmwareRange<1.16.16

AND

siemensrwg1.m12Match-

Node

siemensrwg1.m12d_firmwareRange<1.16.16

AND

siemensrwg1.m12dMatch-

Node

siemensrwg1.m8_firmwareRange<1.16.16

AND

siemensrwg1.m8Match-

CPENameOperatorVersion
siemens:rwg1.m12_firmwaresiemens rwg1.m12 firmwarelt1.16.16

CPE	Name	Operator	Version
siemens:rwg1.m12_firmware	siemens rwg1.m12 firmware	lt	1.16.16

CNA Affected

[
  {
    "product": "RWG1.M12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.16.16"
      }
    ]
  },
  {
    "product": "RWG1.M12D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.16.16"
      }
    ]
  },
  {
    "product": "RWG1.M8",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.16.16"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-448291.pdf

Social References

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

4.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

4.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for CVE-2021-25671

prion1 cvelist1 ics1 nvd1