CVE-2021-25667
Description
A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < V4.1), SCALANCE XR500 (All versions < V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.
How to fix
- siemens ruggedcom_rm1224_firmware6.4 or later
- siemens scalance_m-800_firmware6.4 or later
- siemens scalance_s615_firmware6.4 or later
- siemens scalance_x300wg_firmware4.1 or later
- siemens scalance_xm400_firmware6.2 or later
- siemens scalance_xr500_firmware6.2 or later
- siemens scalance_sc622-2c_firmware2.1.3 or later
- siemens scalance_sc632-2c_firmware2.1.3 or later
- siemens scalance_sc636-2c_firmware2.1.3 or later
- siemens scalance_sc642-2c_firmware2.1.3 or later
- siemens scalance_sc646-2c_firmware2.1.3 or later
- siemens scalance_xb-200_firmware4.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens ruggedcom_rm1224_firmware | 4.3 ≤ v < 6.4 | 6.4 |
| siemens scalance_m-800_firmware | 4.3 ≤ v < 6.4 | 6.4 |
| siemens scalance_s615_firmware | 4.3 ≤ v < 6.4 | 6.4 |
| siemens scalance_x300wg_firmware | v < 4.1 | 4.1 |
| siemens scalance_xm400_firmware | v < 6.2 | 6.2 |
| siemens scalance_xr500_firmware | v < 6.2 | 6.2 |
| siemens scalance_sc622-2c_firmware | v ≤ 2.0, 2.1 ≤ v < 2.1.3 | 2.1.3 |
| siemens scalance_sc632-2c_firmware | v ≤ 2.0, 2.1 ≤ v < 2.1.3 | 2.1.3 |
| siemens scalance_sc636-2c_firmware | v ≤ 2.0, 2.1 ≤ v < 2.1.3 | 2.1.3 |
| siemens scalance_sc642-2c_firmware | v ≤ 2.0, 2.1 ≤ v < 2.1.3 | 2.1.3 |
| siemens scalance_sc646-2c_firmware | v ≤ 2.0, 2.1 ≤ v < 2.1.3 | 2.1.3 |
| siemens scalance_xb-200_firmware | v < 4.1 | 4.1 |
| siemens scalance_xc-200_firmware | v < 4.1 | 4.1 |
| siemens scalance_xf-200ba_firmware | v < 4.1 | 4.1 |
| siemens scalance_xp-200_firmware | v < 4.1 | 4.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.