7.5
Élevée
CVE-2021-25663 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic…
Description
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Capital Embedded AR Classic 431-422 | Versions non publiées | |
| Capital Embedded AR Classic R20-11 2303 | premières → < 2303 | 2303 |
| Nucleus NET | Versions non publiées | |
| Nucleus ReadyStart V3 2017.02 | premières → < 2017.02.4 | 2017.02.4 |
| Nucleus ReadyStart V4 4.1 | premières → < 4.1.0 | 4.1.0 |
| Nucleus Source Code | Versions non publiées |
Références
- cert-portal.siemens.com cert-portal.siemens.com
- us-cert.cisa.gov us-cert.cisa.gov
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Capital Embedded AR Classic 431-422
Les 12 CVE de Capital Embedded AR Classic 431-422 →
CVE-2026-89208
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic…
5.3
Moyenne
CVE-2021-31890
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic…
7.5
Élevée
CVE-2021-31889
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic…
7.5
Élevée
CVE-2021-31883
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic…
7.1
Élevée