Skip to content
5.3 Medium

CVE-2021-31344 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic…

Description

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). ICMP echo packets with fake IP options allow sending ICMP echo reply messages to arbitrary hosts on the network. (FSMD-2021-0004)

Affected products and versions

Product Affected versions Fixed in
Capital Embedded AR Classic 431-422 Versions not published
Capital Embedded AR Classic R20-11 2303 earliest → < 2303 2303
PLUSCONTROL 1st Gen Versions not published
SIMOTICS CONNECT 400 Versions not published

References

Timeline

  1. Published
  2. Last modified
The 12 CVEs of Capital Embedded AR Classic 431-422 →
Track this CVE