CVE-2021-37186

🗓️ 14 Sep 2021 10:47:49Reported by siemensType

CVE-2021-37186: TCP/IP Stack Vulnerability in LOGO! CMR2020, CMR2040, SIMATIC RTU3010C, RTU3030C, RTU3031C, RTU3041

Reporter	Title	Published	Views	Family All 11
CNNVD	Siemens SIMATIC 安全特征问题漏洞	14 Sep 202100:00	–	cnnvd
CNVD	Vulnerability of the Siemens LOGO! CMR family and SIMATIC RTU 3000 family security feature issues	15 Sep 202100:00	–	cnvd
Cvelist	CVE-2021-37186	14 Sep 202110:47	–	cvelist
EUVD	EUVD-2021-23760	7 Oct 202500:30	–	euvd
ICS	Siemens LOGO! CMR and SIMATIC RTU 3000 (Update A)	14 Sep 202100:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products.	14 Sep 202100:00	–	ncsc
NVD	CVE-2021-37186	14 Sep 202111:15	–	nvd
OSV	CVE-2021-37186	14 Sep 202111:15	–	osv
Prion	Information disclosure	14 Sep 202111:15	–	prion
RedhatCVE	CVE-2021-37186	22 May 202518:43	–	redhatcve

NVD

Node

siemens logo!_cmr2020_firmwareRange<2.2

AND

siemens logo!_cmr2020Match-

Node

siemens logo!_cmr2040_firmwareRange<2.2

AND

siemens logo!_cmr2040Match-

Node

siemens simatic_rtu3010c_firmwareRange<4.0.9

AND

siemens simatic_rtu3010c

Node

siemens simatic_rtu3030c_firmwareRange<4.0.9

AND

siemens simatic_rtu3030c

Node

siemens simatic_rtu3031c_firmwareRange<4.0.9

AND

siemens simatic_rtu3031c

Node

siemens simatic_rtu3041c_firmwareRange<4.0.9

AND

siemens simatic_rtu3041c

[
  {
    "product": "LOGO! CMR2020",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.2"
      }
    ]
  },
  {
    "product": "LOGO! CMR2040",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.2"
      }
    ]
  },
  {
    "product": "SIMATIC RTU3010C",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.0.9"
      }
    ]
  },
  {
    "product": "SIMATIC RTU3030C",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.0.9"
      }
    ]
  },
  {
    "product": "SIMATIC RTU3031C",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.0.9"
      }
    ]
  },
  {
    "product": "SIMATIC RTU3041C",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.0.9"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-316383.pdf

21 Nov 2024 06:14Current

5.3Medium risk

Vulners AI Score5.3

CVSS 24.8

CVSS 3.15.4

EPSS0.00165

CWE-330