CVE-2021-25667 Memory corruption in RUGGEDCOM RM1224

Q: Is CVE-2021-25667 being exploited?

There is no known exploitation of CVE-2021-25667 in the wild and no public exploit code.

Q: How do I fix CVE-2021-25667?

No fix has been published for CVE-2021-25667 yet. Limit exposure of the affected software until one is available.

Medium 6.5 Published 15 Mar 2021 Updated 2 Jun 2026

Remote attackers can cause denial of service or execute code via stack-based buffer overflow in STP BPDU handling on Siemens SCALANCE devices with passive listening enabled.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-25667?

CVE-2021-25667 is a medium-severity memory corruption vulnerability in Siemens RUGGEDCOM RM1224, published on 15 Mar 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < V4.1), SCALANCE XR500 (All versions < V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.

Weakness: CWE-787, CWE-121

Which versions are affected by CVE-2021-25667?

It affects 15 products.

Products include Siemens Ruggedcom Rm1224 Firmware, Siemens Scalance M-800 Firmware, Siemens Scalance S615 Firmware, Siemens Scalance Sc622-2c Firmware, Siemens Scalance Sc632-2c Firmware, Siemens Scalance Sc636-2c Firmware and 9 more.

How do I fix CVE-2021-25667?

No fix has been published for CVE-2021-25667 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2021-25667 being exploited?

There is no known exploitation of CVE-2021-25667 in the wild and no public exploit code.

Sources

Also known as GHSA-p672-97f8-chmq.