CVE-2021-25663

CVSS 8.7 HIGHEPSS 1.9%CWE-835

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.7EPSS 1.9%KEV nãoPoC —Patch —

Lifecycle

22 Apr 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected products

Siemens · Capital Embedded AR Classic 431-422 Siemens · Capital Embedded AR Classic R20-11 Siemens · Nucleus NET Siemens · Nucleus ReadyStart V3 Siemens · Nucleus ReadyStart V4 Siemens · Nucleus Source Code

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://cert-portal.siemens.com/productcert/html/ssa-248289.html https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05