Lucene search

[email protected]CVE-2021-37182

HistoryJun 14, 2022 - 10:15 a.m.

CVE-2021-37182

2022-06-1410:15:17

CWE-354

[email protected]

web.nvd.nist.gov

scalance

vulnerability

remote attackers

network interruptions

ospf protocol

cve-2021-37182

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.3%

JSON

A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5), SCALANCE XM416-4C (All versions < V6.5), SCALANCE XM416-4C (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 1x230V (All versions < V6.5), SCALANCE XR524-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 24V (All versions < V6.5), SCALANCE XR524-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 2x230V (All versions < V6.5), SCALANCE XR524-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 1x230V (All versions < V6.5), SCALANCE XR526-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 24V (All versions < V6.5), SCALANCE XR526-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 2x230V (All versions < V6.5), SCALANCE XR526-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR528-6M (All versions < V6.5), SCALANCE XR528-6M (2HR2) (All versions < V6.5), SCALANCE XR528-6M (2HR2, L3 int.) (All versions < V6.5), SCALANCE XR528-6M (L3 int.) (All versions < V6.5), SCALANCE XR552-12M (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2, L3 int.) (All versions < V6.5). The OSPF protocol implementation in affected devices fails to verify the checksum and length fields in the OSPF LS Update messages. An unauthenticated remote attacker could exploit this vulnerability to cause interruptions in the network by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.

Affected configurations

NVD

Node

siemensscalance_xm408-4c_firmwareRange<6.5

AND

siemensscalance_xm408-4cMatch-

Node

siemensscalance_xm408-4c_l3_firmwareRange<6.5

AND

siemensscalance_xm408-4c_l3Match-

Node

siemensscalance_xm408-8c_firmwareRange<6.5

AND

siemensscalance_xm408-8cMatch-

Node

siemensscalance_xm408-8c_l3_firmwareRange<6.5

AND

siemensscalance_xm408-8c_l3Match-

Node

siemensscalance_xm416-4c_firmwareRange<6.5

AND

siemensscalance_xm416-4cMatch-

Node

siemensscalance_xm416-4c_l3_firmwareRange<6.5

AND

siemensscalance_xm416-4c_l3Match-

Node

siemensscalance_xr524-8c_firmwareRange<6.5

AND

siemensscalance_xr524-8cMatch-

Node

siemensscalance_xr524-8c_firmwareRange<6.51x230v

AND

siemensscalance_xr524-8cMatch-1x230v

Node

siemensscalance_xr524-8c_firmwareRange<6.524v

AND

siemensscalance_xr524-8cMatch-24v

Node

siemensscalance_xr524-8c_firmwareRange<6.52x230v

AND

siemensscalance_xr524-8cMatch-2x230v

Node

siemensscalance_xr524-8c_l3_firmwareRange<6.5

AND

siemensscalance_xr524-8c_l3Match-

Node

siemensscalance_xr524-8c_l3_firmwareRange<6.51x230v

AND

siemensscalance_xr524-8c_l3Match-1x230v

Node

siemensscalance_xr524-8c_l3_firmwareRange<6.524v

AND

siemensscalance_xr524-8c_l3Match-24v

Node

siemensscalance_xr524-8c_l3_firmwareRange<6.52x230v

AND

siemensscalance_xr524-8c_l3Match-2x230v

Node

siemensscalance_xr526-8c_firmwareRange<6.5

AND

siemensscalance_xr526-8cMatch-

Node

siemensscalance_xr526-8c_firmwareRange<6.51x230v

AND

siemensscalance_xr526-8cMatch-1x230v

Node

siemensscalance_xr526-8cMatch-24v

AND

siemensscalance_xr526-8c_firmwareRange<6.524v

Node

siemensscalance_xr526-8c_firmwareRange<6.52x230v

AND

siemensscalance_xr526-8cMatch-2x230v

Node

siemensscalance_xr526-8c_l3_firmwareRange<6.5

AND

siemensscalance_xr526-8c_l3Match-

Node

siemensscalance_xr526-8c_l3_firmwareRange<6.51x230v

AND

siemensscalance_xr526-8c_l3Match-1x230v

Node

siemensscalance_xr526-8c_l3_firmwareRange<6.524v

AND

siemensscalance_xr526-8c_l3Match-24v

Node

siemensscalance_xr526-8c_l3Match-2x230v

AND

siemensscalance_xr526-8c_l3_firmwareRange<6.52x230v

Node

siemensscalance_xr528-6mMatch-

AND

siemensscalance_xr528-6m_firmwareRange<6.5

Node

siemensscalance_xr528-6m_2hr2Match-

AND

siemensscalance_xr528-6m_2hr2_firmwareRange<6.5

Node

siemensscalance_xr528-6m_2hr2_l3Match-

AND

siemensscalance_xr528-6m_2hr2_l3_firmwareRange<6.5

Node

siemensscalance_xr528-6m_l3Match-

AND

siemensscalance_xr528-6m_l3_firmwareRange<6.5

Node

siemensscalance_xr552-12mMatch-

AND

siemensscalance_xr552-12m_firmwareRange<6.5

Node

siemensscalance_xr552-12m_2hr2Match-

AND

siemensscalance_xr552-12m_2hr2_firmwareRange<6.5

Node

siemensscalance_xr552-12m_2hr2_l3Match-

AND

siemensscalance_xr552-12m_2hr2_l3_firmwareRange<6.5

CPENameOperatorVersion
siemens:scalance_xm408-4c_firmwaresiemens scalance xm408-4c firmwarelt6.5

CPE	Name	Operator	Version
siemens:scalance_xm408-4c_firmware	siemens scalance xm408-4c firmware	lt	6.5

CNA Affected

[
  {
    "product": "SCALANCE XM408-4C",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XM408-4C (L3 int.)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XM408-8C",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XM408-8C (L3 int.)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XM416-4C",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XM416-4C (L3 int.)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR524-8C, 1x230V",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR524-8C, 1x230V (L3 int.)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR524-8C, 24V",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR524-8C, 24V (L3 int.)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR524-8C, 2x230V",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR524-8C, 2x230V (L3 int.)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR526-8C, 1x230V",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR526-8C, 1x230V (L3 int.)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR526-8C, 24V",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR526-8C, 24V (L3 int.)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR526-8C, 2x230V",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR526-8C, 2x230V (L3 int.)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR528-6M",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR528-6M (2HR2)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR528-6M (2HR2, L3 int.)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR528-6M (L3 int.)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR552-12M",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR552-12M (2HR2)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR552-12M (2HR2)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  },
  {
    "product": "SCALANCE XR552-12M (2HR2, L3 int.)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.5"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-145224.pdf

Social References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.3%

JSON

Related for CVE-2021-37182

cvelist1 nvd1 prion1 ics1 nessus1