Lucene search

[email protected]NVD:CVE-2021-25676

HistoryMar 15, 2021 - 5:15 p.m.

CVE-2021-25676

2021-03-1517:15:22

CWE-307

[email protected]

web.nvd.nist.gov

vulnerability

ruggedcom rm1224

scalance m-800

scalance s615

scalance sc-600

dos

ssh authentication

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

44.7%

JSON

A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.

Affected configurations

Nvd

Node

siemensruggedcom_rm1224_firmwareMatch6.3

AND

siemensruggedcom_rm1224Match-

Node

siemensscalance_m-800_firmwareMatch6.3

AND

siemensscalance_m-800Match-

Node

siemensscalance_s615_firmwareMatch6.3

AND

siemensscalance_s615Match-

Node

siemensscalance_sc-600_firmwareRange2.1–2.1.3

AND

siemensscalance_sc-600Match-

VendorProductVersionCPE
siemensruggedcom_rm1224_firmware6.3cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:6.3:*:*:*:*:*:*:*
siemensruggedcom_rm1224-cpe:2.3:h:siemens:ruggedcom_rm1224:-:*:*:*:*:*:*:*
siemensscalance_m-800_firmware6.3cpe:2.3:o:siemens:scalance_m-800_firmware:6.3:*:*:*:*:*:*:*
siemensscalance_m-800-cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*
siemensscalance_s615_firmware6.3cpe:2.3:o:siemens:scalance_s615_firmware:6.3:*:*:*:*:*:*:*
siemensscalance_s615-cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*
siemensscalance_sc-600_firmware*cpe:2.3:o:siemens:scalance_sc-600_firmware:*:*:*:*:*:*:*:*
siemensscalance_sc-600-cpe:2.3:h:siemens:scalance_sc-600:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
siemens	ruggedcom_rm1224_firmware	6.3	cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:6.3:::::::*
siemens	ruggedcom_rm1224	-	cpe:2.3:h:siemens:ruggedcom_rm1224:-:::::::*
siemens	scalance_m-800_firmware	6.3	cpe:2.3:o:siemens:scalance_m-800_firmware:6.3:::::::*
siemens	scalance_m-800	-	cpe:2.3:h:siemens:scalance_m-800:-:::::::*
siemens	scalance_s615_firmware	6.3	cpe:2.3:o:siemens:scalance_s615_firmware:6.3:::::::*
siemens	scalance_s615	-	cpe:2.3:h:siemens:scalance_s615:-:::::::*
siemens	scalance_sc-600_firmware	*	cpe:2.3:o:siemens:scalance_sc-600_firmware::::::::
siemens	scalance_sc-600	-	cpe:2.3:h:siemens:scalance_sc-600:-:::::::*

References

cert-portal.siemens.com/productcert/pdf/ssa-296266.pdf

us-cert.cisa.gov/ics/advisories/icsa-21-068-02

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

44.7%

JSON

Related for NVD:CVE-2021-25676

nessus1 ics1 cvelist1 prion1 cve1