CVE-2021-29998
Critical
Description
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.
SeverityCritical
CVSS9.8
Exploit probability—
ProductWindriver Vxworks
PublishedApr 13, 2021
First seenApr 13, 2021
How to fix
Update
- windriver vxworks6.5 or later
- siemens sinamics_perfect_harmony_gh180_firmware2022 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| windriver vxworks | v < 6.5 | 6.5 |
| siemens ruggedcom_win_subscriber_station_firmware | No range specified | — |
| siemens scalance_x200-4_p_irt_firmware | No range specified | — |
| siemens scalance_x201-3p_irt_firmware | No range specified | — |
| siemens scalance_x201-3p_irt_pro_firmware | No range specified | — |
| siemens scalance_x202-2_irt_firmware | No range specified | — |
| siemens scalance_x202-2p_irt_firmware | No range specified | — |
| siemens scalance_x202-2p_irt_pro_firmware | No range specified | — |
| siemens scalance_x204_irt_firmware | No range specified | — |
| siemens scalance_x204_irt_pro_firmware | No range specified | — |
| siemens scalance_x204-2_firmware | No range specified | — |
| siemens scalance_x204-2fm_firmware | No range specified | — |
| siemens scalance_x204-2ld_firmware | No range specified | — |
| siemens scalance_x204-2ld_ts_firmware | No range specified | — |
| siemens scalance_x204-2ts_firmware | No range specified | — |
| siemens scalance_x206-1_firmware | No range specified | — |
| siemens scalance_x206-1ld_firmware | No range specified | — |
| siemens scalance_x208_firmware | No range specified | — |
| siemens scalance_x208_pro_firmware | No range specified | — |
| siemens scalance_x212-2_firmware | No range specified | — |
| siemens scalance_x212-2ld_firmware | No range specified | — |
| siemens scalance_x216_firmware | No range specified | — |
| siemens scalance_x224_firmware | No range specified | — |
| siemens scalance_x300_firmware | No range specified | — |
| siemens scalance_x408_firmware | No range specified | — |
| siemens scalance_xf201-3p_irt_firmware | No range specified | — |
| siemens scalance_xf202-2p_irt_firmware | No range specified | — |
| siemens scalance_xf204_firmware | No range specified | — |
| siemens scalance_xf204_irt_firmware | No range specified | — |
| siemens scalance_xf204-2_firmware | No range specified | — |
| siemens scalance_xf204-2ba_irt_firmware | No range specified | — |
| siemens scalance_xf206-1_firmware | No range specified | — |
| siemens scalance_xf208_firmware | No range specified | — |
| siemens simatic_rf_181_eip_firmware | No range specified | — |
| siemens simatic_rf_182c_firmware | No range specified | — |
| siemens sinamics_perfect_harmony_gh180_firmware | 2015 ≤ v < 2022 | 2022 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.