Siemens Nucleus RTOS-based APOGEE and TALON Products Out-of-Bounds Read (CVE-2021-31881)

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

CVE-2021-31881

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303. When processing a DHCP OFFER message, the DHCP client application does not validate the length of the Vendor options, leading to Denial-of-Service...

CVE-2021-31881

CVE-2021-31881 involves APOGEE MBC/TALON/Desigo PXC software family (Siemens Nucleus RTOS, BACnet/PPC) where the DHCP client fails to validate the Vendor option length when processing DHCP OFFER, leading to Denial-of-Service. Multiple Tenable OT/Nessus entries corroborate this family of DHCP leng...