CVE-2021-31344 Other in Capital Embedded AR Classic 431-422
Attackers can spoof ICMP echo replies to arbitrary hosts via crafted IP options, potentially enabling network reconnaissance or amplification attacks on Siemens industrial devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-31344?
CVE-2021-31344 is a medium-severity vulnerability in Siemens Capital Embedded AR Classic 431-422, published on 9 Nov 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). ICMP echo packets with fake IP options allow sending ICMP echo reply messages to arbitrary hosts on the network. (FSMD-2021-0004)
Weakness: CWE-843
Which versions are affected by CVE-2021-31344?
It affects 11 products.
Products include Siemens Apogee Modular Building Controller Firmware, Siemens Apogee Modular Equiment Controller Firmware, Siemens Apogee Pxc Compact Firmware, Siemens Apogee Pxc Modular Firmware, Siemens Capital Vstar, Siemens Nucleus Net and 5 more.
How do I fix CVE-2021-31344?
No fix has been published for CVE-2021-31344 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-31344 being exploited?
There is no known exploitation of CVE-2021-31344 in the wild and no public exploit code.
Other vulnerabilities in Siemens Capital Embedded AR Classic 431-422
- CVE-2021-31884 Memory corruption in APOGEE MBC (PPC) (BACnet)
- CVE-2021-31886 Memory corruption in APOGEE MBC (PPC) (BACnet)
- CVE-2021-31887 Memory corruption in APOGEE MBC (PPC) (BACnet)
- CVE-2021-31888 Memory corruption in APOGEE MBC (PPC) (BACnet)
- CVE-2022-38371 Denial of service in APOGEE MBC (PPC) (BACnet)
Sources
Also known as GHSA-47j6-w2j2-7jxf.