Skip to content
OpenAdvisories
Medium ICSA-21-194-12 1 CVE

Siemens VxWorks-based Industrial Products (Update C)

Published Jul 13, 2021 · Updated May 12, 2022 · Revision 3

Vendor: Siemens Product: RUGGEDCOM WIN5100 series subscriber unit Product: RUGGEDCOM WIN5200 series subscriber unit Product: SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) Product: SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3) Product: SCALANCE X201-3P IRT PRO (6GK5201-3BH00-2BD2) Product: SCALANCE X202-2IRT (6GK5202-2BB00-2BA3) Product: SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3) Product: SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6) Product: SCALANCE X204-2 (6GK5204-2BB10-2AA3) Product: SCALANCE X204-2FM (6GK5204-2BB11-2AA3) Product: SCALANCE X204-2LD (6GK5204-2BC10-2AA3) Product: SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2) Product: SCALANCE X204-2TS (6GK5204-2BB10-2CA2) Product: SCALANCE X204IRT (6GK5204-0BA00-2BA3) Product: SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6) Product: SCALANCE X206-1 (6GK5206-1BB10-2AA3) Product: SCALANCE X206-1LD (6GK5206-1BC10-2AA3) Product: SCALANCE X208 (6GK5208-0BA10-2AA3) Product: SCALANCE X208PRO (6GK5208-0HA10-2AA6) Product: SCALANCE X212-2 (6GK5212-2BB00-2AA3) Product: SCALANCE X212-2LD (6GK5212-2BC00-2AA3) Product: SCALANCE X216 (6GK5216-0BA00-2AA3) Product: SCALANCE X224 (6GK5224-0BA00-2AA3) Product: SCALANCE X302-7 EEC (230V coated) (6GK5302-7GD00-3GA3) Product: SCALANCE X302-7 EEC (230V) (6GK5302- 7GD00-3EA3) Product: SCALANCE X302-7 EEC (24V coated) (6GK5302-7GD00-1GA3) Product: SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3) Product: SCALANCE X302-7 EEC (2x 230V coated) (6GK5302-7GD00-4GA3) Product: SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3) +79 more

Summary

Successful exploitation of this vulnerability could allow an attacker to cause a heap-based buffer overflow.

Vulnerabilities 1

  • Unscored —
    CVE-2021-29998

    An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.

Revision history

  1. #3

    ICSA-21-194-12 Siemens VxWorks-based Industrial Products (Update B)

  2. #2

    ICSA-21-194-12 Siemens VxWorks-based Industrial Products (Update A)

  3. #1

    ICSA-21-194-12 Siemens Wind River VxWorks-based Industrial Products

References