Skip to content
fr Sign in
7.5 High

CVE-2021-31890 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic…

Description

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an TCP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0017)

Affected products and versions

Product Affected versions Fixed in
Capital Embedded AR Classic 431-422 Versions not published
Capital Embedded AR Classic R20-11 2303 earliest → < 2303 2303
PLUSCONTROL 1st Gen Versions not published
SIMOTICS CONNECT 400 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Capital Embedded AR Classic 431-422

The 12 CVEs of Capital Embedded AR Classic 431-422 →
CVE-2026-89208 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic… 5.3 Medium CVE-2021-31889 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic… 7.5 High CVE-2021-31883 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic… 7.1 High CVE-2021-31882 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic… 6.5 Medium
Track this CVE