CVE-2021-31886

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

CVE-2021-31890

CVE-2021-31890 stems from an unchecked TCP payload length in Siemens Nucleus NET stack used across multiple Siemens products (e.g., Capital Embedded AR Classic, PLUSCONTROL, SIMOTICS CONNECT 400, etc.). The issue enables information leaks and Denial-of-Service conditions depending on network buff...

CVE-2021-31890

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, PLUSCONTROL 1st Gen All versions, SIMOTICS CONNECT 400 All versions V0.5.0.0, SIMOTICS CONNECT 400 All versions V1.0.0.0. The total length of an TCP...

CVE-2021-31889

CVE-2021-31889 is an integer underflow in the Nucleus NET TCP/IP stack used by several Siemens products (APOGEE MBC/MEC, PLUSCONTROL, Capital VSTAR, SIMOTICS CONNECT 400, etc.). The flaw arises from malformed TCP packets with a corrupted SACK option, enabling information leaks and denial-of-servi...

CVE-2021-31889

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, PLUSCONTROL 1st Gen All versions, SIMOTICS CONNECT 400 All versions V0.5.0.0. Malformed TCP packets with a corrupted SACK option leads to Information Lea...

CVE-2021-31887

CVE-2021-31887 affects a wide range of Siemens APOGEE/TALON/Nucleus products (BACnet and P2 Ethernet variants, various Desigo/PXC/Nucleus lines). The root cause is a stack-based buffer overwrite in the FTP server caused by improper validation of the length of the PWD/XPWD command, which may allow...

CVE-2021-31888

Summary of CVE-2021-31888 : The vulnerability affects APOGEE/MBC/MEC/PXC family devices (BACnet/P2 Ethernet) and related Desigo/Nucleus/TALON/Nucleus RTOS components listed in the description. The issue is a stack-based buffer overflow in the FTP server caused by improper validation of the length...

CVE-2021-31888

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

CVE-2021-31887

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

CVE-2021-31886

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

CVE-2021-31886

Technical details for CVE-2021-31886 (affected software, impact, exploitability, and remediation) are not present in the provided Connected documents. Please monitor for updates.

CVE-2021-31885

CVE-2021-31885 : TFTP memory buffer reading vulnerability reported in Siemens Nucleus APOGEE/MBC/TALON/TALON-related products (PPC/BACnet, P2 Ethernet, Desigo PXC, PXM, Nucleus NET, etc.) where a malformed TFTP command can read the contents of the TFTP memory buffer. Source documents from the vul...

CVE-2021-31885

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

CVE-2021-31884

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

CVE-2021-31884

CVE-2021-31884 affects Siemens Nucleus/APOGEE/TALON family (MBC/MEC/PXC/Nucleus) with a DHCP client hostname option handling flaw. The DHCP hostname data is not guaranteed to be NULL-terminated, which can cause out-of-bounds reads/writes and Denial-of-Service. The available connected sources conf...

CVE-2021-31883

CVE-2021-31883 affects Siemens APOGEE MBC / TALON products (Nucleus RTOS) including APOGEE MBC (PPC/BACnet), APOGEE MEC, APOGEE PXC Compact/Modular, Desigo PXC variants, and Capital VSTAR with Ethernet options. Root cause: DHCP client processing fails to validate the length of Vendor option(s) in...

CVE-2021-31883

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303. When processing a DHCP ACK message, the DHCP client application does not validate the length of the Vendor options, leading to Denial-of-Service...

CVE-2021-31882

CVE-2021-31882 affects Siemens APOGEE MBC/TALON/Nucleus products (e.g., Capital Embedded AR Classic 431-422 family and AR Classic R20-11, affected “All versions” in some entries). The root cause is that the DHCP client does not validate the length of the Domain Name Server IP option (0x06) when p...

CVE-2021-31881

CVE-2021-31881 involves APOGEE MBC/TALON/Desigo PXC software family (Siemens Nucleus RTOS, BACnet/PPC) where the DHCP client fails to validate the Vendor option length when processing DHCP OFFER, leading to Denial-of-Service. Multiple Tenable OT/Nessus entries corroborate this family of DHCP leng...

CVE-2021-31881

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303. When processing a DHCP OFFER message, the DHCP client application does not validate the length of the Vendor options, leading to Denial-of-Service...