CVE-2021-31886

🗓️ 09 Nov 2021 11:31:59Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 146 Views

CVE-2021-31886 APOGEE, Desigo, Nucleus, TALON - FTP server vulnerabilit

Reporter	Title	Published	Views	Family All 22
attackerkb	CVE-2021-31886	9 Nov 202112:15	–	attackerkb
BDU FSTEC	FTP Server Code Execution	20 Apr 202200:00	–	bdu_fstec
Circl	CVE-2021-31886	10 Nov 202116:40	–	circl
CNNVD	Siemens Nucleus ReadyStart 缓冲区错误漏洞	9 Nov 202100:00	–	cnnvd
CNVD	Incorrect Zero Termination Vulnerability in Multiple Siemens Products (CNVD-2021-89438)	11 Nov 202100:00	–	cnvd
Cvelist	CVE-2021-31886	9 Nov 202111:31	–	cvelist
EUVD	EUVD-2021-18761	7 Oct 202500:30	–	euvd
ICS	Siemens Nucleus RTOS TCP/IP Stack	9 Nov 202100:00	–	ics
Malwarebytes	[updated] Patch now! Microsoft plugs actively exploited zero-days and other updates	10 Nov 202114:30	–	malwarebytes
NCSC	Vulnerabilities fixed in Nucleus NET stack	9 Nov 202100:00	–	ncsc

NVD

Vulners

Node

siemens nucleus_net

siemens nucleus_readystart_v3Range<2017.02.4

siemens nucleus_source_code

Node

AND

siemens apogee_modular_building_controller_firmware

siemens apogee_modular_building_controllerMatch-

Node

AND

siemens apogee_modular_equiment_controller_firmware

siemens apogee_modular_equiment_controllerMatch-

Node

AND

siemens apogee_pxc_compact_firmwareRange<2.8.19p2_ethernet

siemens apogee_pxc_compact_firmwareRange<3.5.4bacnet

siemens apogee_pxc_compactMatch-

Node

AND

siemens apogee_pxc_modular_firmwareRange<2.8.19p2_ethernet

siemens apogee_pxc_modular_firmwareRange<3.5.4bacnet

siemens apogee_pxc_modularMatch-

Node

AND

siemens talon_tc_compact_firmwareRange<3.5.4

siemens talon_tc_compactMatch-

Node

AND

siemens talon_tc_modular_firmwareRange<3.5.4

siemens talon_tc_modularMatch-

Node

AND

siemens desigo_pxc00-e.d_firmwareRange2.3–6.30.016

siemens desigo_pxc00-e.dMatch-

Node

AND

siemens desigo_pxc00-u_firmwareRange2.3–6.30.016

siemens desigo_pxc00-uMatch-

Node

AND

siemens desigo_pxc001-e.d_firmwareRange2.3–6.30.016

siemens desigo_pxc001-e.dMatch-

Node

AND

siemens desigo_pxc12-e.d_firmwareRange2.3–6.30.016

siemens desigo_pxc12-e.dMatch-

Node

AND

siemens desigo_pxc22-e.d_firmwareRange2.3–6.30.016

siemens desigo_pxc22-e.dMatch-

Node

AND

siemens desigo_pxc22.1-e.d_firmwareRange2.3–6.30.016

siemens desigo_pxc22.1-e.dMatch-

Node

AND

siemens desigo_pxc36.1-e.d_firmwareRange2.3–6.30.016

siemens desigo_pxc36.1-e.dMatch-

Node

AND

siemens desigo_pxc50-e.d_firmwareRange2.3–6.30.016

siemens desigo_pxc50-e.dMatch-

Node

AND

siemens desigo_pxc64-u_firmwareRange2.3–6.30.016

siemens desigo_pxc64-uMatch-

Node

AND

siemens desigo_pxc100-e.d_firmwareRange2.3–6.30.016

siemens desigo_pxc100-e.dMatch-

Node

AND

siemens desigo_pxc128-u_firmwareRange2.3–6.30.016

siemens desigo_pxc128-uMatch-

Node

AND

siemens desigo_pxc200-e.d_firmwareRange2.3–6.30.016

siemens desigo_pxc200-e.dMatch-

Node

AND

siemens desigo_pxm20-e_firmwareRange2.3–6.30.016

siemens desigo_pxm20-eMatch-

[
  {
    "product": "APOGEE MBC (PPC) (BACnet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "APOGEE MBC (PPC) (P2 Ethernet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "APOGEE MEC (PPC) (BACnet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "APOGEE MEC (PPC) (P2 Ethernet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "APOGEE PXC Compact (BACnet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.5.4"
      }
    ]
  },
  {
    "product": "APOGEE PXC Compact (P2 Ethernet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.8.19"
      }
    ]
  },
  {
    "product": "APOGEE PXC Modular (BACnet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.5.4"
      }
    ]
  },
  {
    "product": "APOGEE PXC Modular (P2 Ethernet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.8.19"
      }
    ]
  },
  {
    "product": "Desigo PXC00-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC00-U",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC001-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC100-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC12-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC128-U",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC200-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC22-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC22.1-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC36.1-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC50-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC64-U",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXM20-E",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Nucleus NET",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "Nucleus ReadyStart V3",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2017.02.4"
      }
    ]
  },
  {
    "product": "Nucleus Source Code",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "TALON TC Compact (BACnet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.5.4"
      }
    ]
  },
  {
    "product": "TALON TC Modular (BACnet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.5.4"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf

17 Jun 2026 03:52Current

9.5Critical risk

Vulners AI Score9.5

CVSS 27.5

CVSS 3.19.8

EPSS0.03049