CVE-2021-25676

2021-03-1517:03:31

CWE-307

siemens

www.cve.org

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

JSON

A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.

CNA Affected

[
  {
    "product": "RUGGEDCOM RM1224",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "V6.3"
      }
    ]
  },
  {
    "product": "SCALANCE M-800",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "V6.3"
      }
    ]
  },
  {
    "product": "SCALANCE S615",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "V6.3"
      }
    ]
  },
  {
    "product": "SCALANCE SC-600",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions >= V2.1 and < V2.1.3"
      }
    ]
  }
]