Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2021-31887

🗓️ 09 Nov 2021 11:32:00Reported by siemensType 
cve
 cve🔗 web.nvd.nist.gov👁 117 Views

APOGEE, Desigo and Nucleus products are vulnerable to stack-based buffer overflow, leading to Denial-of-Service and Remote Code Execution

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC		The vulnerability of FTP servers for microprogrammed software controllers such as CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus allows a hacker to cause service failures or execute arbitrary codes.
20 Apr 202200:00
–bdu_fstec
Circl		CVE-2021-31887
9 Nov 202114:30
–circl
CNNVD		Siemens Nucleus ReadyStart 缓冲区错误漏洞
9 Nov 202100:00
–cnnvd
CNVD		Incorrect Zero Termination Vulnerability in Multiple Siemens Products (CNVD-2021-89437)
11 Nov 202100:00
–cnvd
Cvelist		CVE-2021-31887
9 Nov 202111:32
–cvelist
EUVD		EUVD-2021-18762
7 Oct 202500:30
–euvd
ICS		Siemens Nucleus RTOS TCP/IP Stack
9 Nov 202100:00
–ics
Malwarebytes		[updated] Patch now! Microsoft plugs actively exploited zero-days and other updates
10 Nov 202114:30
–malwarebytes
NCSC		Vulnerabilities fixed in Nucleus NET stack
9 Nov 202100:00
–ncsc
Tenable Nessus		Nucleus FTP Server Multiple Vulnerabilities (NUCLEUS:13)
11 Nov 202100:00
–nessus
Rows per page
NVD
Node
siemensnucleus_net
OR
siemensnucleus_readystart_v3Range<2017.02.4
OR
siemensnucleus_source_code
Node
siemensapogee_modular_building_controller_firmware
AND
siemensapogee_modular_building_controllerMatch-
Node
siemensapogee_modular_equiment_controller_firmware
AND
siemensapogee_modular_equiment_controllerMatch-
Node
siemensapogee_pxc_compact_firmwareRange<2.8.19p2_ethernet
OR
siemensapogee_pxc_compact_firmwareRange<3.5.4bacnet
AND
siemensapogee_pxc_compactMatch-
Node
siemensapogee_pxc_modular_firmwareRange<2.8.19p2_ethernet
OR
siemensapogee_pxc_modular_firmwareRange<3.5.4bacnet
AND
siemensapogee_pxc_modularMatch-
Node
siemenstalon_tc_compact_firmwareRange<3.5.4
AND
siemenstalon_tc_compactMatch-
Node
siemenstalon_tc_modular_firmwareRange<3.5.4
AND
siemenstalon_tc_modularMatch-
Node
siemensdesigo_pxc00-e.d_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxc00-e.dMatch-
Node
siemensdesigo_pxc00-u_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxc00-uMatch-
Node
siemensdesigo_pxc001-e.d_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxc001-e.dMatch-
Node
siemensdesigo_pxc12-e.d_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxc12-e.dMatch-
Node
siemensdesigo_pxc22-e.d_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxc22-e.dMatch-
Node
siemensdesigo_pxc22.1-e.d_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxc22.1-e.dMatch-
Node
siemensdesigo_pxc36.1-e.d_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxc36.1-e.dMatch-
Node
siemensdesigo_pxc50-e.d_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxc50-e.dMatch-
Node
siemensdesigo_pxc64-u_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxc64-uMatch-
Node
siemensdesigo_pxc100-e.d_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxc100-e.dMatch-
Node
siemensdesigo_pxc128-u_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxc128-uMatch-
Node
siemensdesigo_pxc200-e.d_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxc200-e.dMatch-
Node
siemensdesigo_pxm20-e_firmwareRange2.3–6.30.016
AND
siemensdesigo_pxm20-eMatch-
[
  {
    "product": "APOGEE MBC (PPC) (BACnet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "APOGEE MBC (PPC) (P2 Ethernet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "APOGEE MEC (PPC) (BACnet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "APOGEE MEC (PPC) (P2 Ethernet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "APOGEE PXC Compact (BACnet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.5.4"
      }
    ]
  },
  {
    "product": "APOGEE PXC Compact (P2 Ethernet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.8.19"
      }
    ]
  },
  {
    "product": "APOGEE PXC Modular (BACnet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.5.4"
      }
    ]
  },
  {
    "product": "APOGEE PXC Modular (P2 Ethernet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.8.19"
      }
    ]
  },
  {
    "product": "Desigo PXC00-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC00-U",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC001-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC100-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC12-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC128-U",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC200-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC22-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC22.1-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC36.1-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC50-E.D",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXC64-U",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Desigo PXM20-E",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions >= V2.3 and < V6.30.016"
      }
    ]
  },
  {
    "product": "Nucleus NET",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "Nucleus ReadyStart V3",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2017.02.4"
      }
    ]
  },
  {
    "product": "Nucleus Source Code",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "TALON TC Compact (BACnet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.5.4"
      }
    ]
  },
  {
    "product": "TALON TC Modular (BACnet)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.5.4"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2024 06:06Current
9.2High risk
Vulners AI Score9.2
CVSS 26.5
CVSS 3.18.8
EPSS0.03395
CWE-787CWE-170
cve-2021-31887vulnerabilityapogeedesigonucleusstack-based buffer overflowdosremote code execution
117