Skip to content
7.5 High

CVE-2021-31889 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic…

Description

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0). Malformed TCP packets with a corrupted SACK option leads to Information Leaks and Denial-of-Service conditions. (FSMD-2021-0015)

Affected products and versions

Product Affected versions Fixed in
Capital Embedded AR Classic 431-422 Versions not published
Capital Embedded AR Classic R20-11 2303 earliest → < 2303 2303
PLUSCONTROL 1st Gen Versions not published
SIMOTICS CONNECT 400 Versions not published

References

Timeline

  1. Published
  2. Last modified
The 12 CVEs of Capital Embedded AR Classic 431-422 →
Track this CVE