CVE-2021-31889 Information disclosure in Capital Embedded AR Classic 431-422
Malformed TCP packets cause information leaks and denial-of-service in Siemens industrial controllers, requiring firmware updates.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-31889?
CVE-2021-31889 is a high-severity vulnerability in Siemens Capital Embedded AR Classic 431-422, published on 9 Nov 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0). Malformed TCP packets with a corrupted SACK option leads to Information Leaks and Denial-of-Service conditions. (FSMD-2021-0015)
Weakness: CWE-191
Which versions are affected by CVE-2021-31889?
It affects 10 products.
Products include Siemens Apogee Modular Building Controller Firmware, Siemens Apogee Modular Equiment Controller Firmware, Siemens Apogee Pxc Compact Firmware, Siemens Apogee Pxc Modular Firmware, Siemens Capital Vstar, Siemens Nucleus Net and 4 more.
How do I fix CVE-2021-31889?
Upgrade to a fixed version.
Is CVE-2021-31889 being exploited?
There is no known exploitation of CVE-2021-31889 in the wild and no public exploit code.
Other vulnerabilities in Siemens Capital Embedded AR Classic 431-422
- CVE-2021-31884 Memory corruption in APOGEE MBC (PPC) (BACnet)
- CVE-2021-31886 Memory corruption in APOGEE MBC (PPC) (BACnet)
- CVE-2021-31887 Memory corruption in APOGEE MBC (PPC) (BACnet)
- CVE-2021-31888 Memory corruption in APOGEE MBC (PPC) (BACnet)
- CVE-2022-38371 Denial of service in APOGEE MBC (PPC) (BACnet)
Sources
Also known as GHSA-9f8q-4pw9-8433.