CVE-2021-25667

Summary

CVE	CVE-2021-25667
State	PUBLISHED
Assigner	siemens
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-03-15 17:15:21 UTC
Updated	2026-06-02 20:16:26 UTC
Description	A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < V4.1), SCALANCE XR500 (All versions < V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.

Risk And Classification

Primary CVSS: v3.1 8.8 HIGH from [email protected]

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem Types: CWE-121 | CWE-787 | CWE-121 CWE-121: Stack-based Buffer Overflow

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Primary	8.8	HIGH	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
3.1	ADP	DECLARED	6.5	MEDIUM	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
3.1	134c704f-9b21-4f2e-91b3-4a467353bcc0	Secondary	6.5	MEDIUM	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
2.0	[email protected]	Primary	5.8		`AV:A/AC:L/Au:N/C:P/I:P/A:P`

CVSS v3.1 Breakdown

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 Breakdown

Access Vector

Adjacent

Access Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

AV:A/AC:L/Au:N/C:P/I:P/A:P

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Siemens	Ruggedcom Rm1224	-	All	All	All
Operating System	Siemens	Ruggedcom Rm1224 Firmware	All	All	All	All
Hardware	Siemens	Scalance M-800	-	All	All	All
Operating System	Siemens	Scalance M-800 Firmware	All	All	All	All
Hardware	Siemens	Scalance S615	-	All	All	All
Operating System	Siemens	Scalance S615 Firmware	All	All	All	All
Hardware	Siemens	Scalance Sc622-2c	-	All	All	All
Operating System	Siemens	Scalance Sc622-2c Firmware	All	All	All	All
Operating System	Siemens	Scalance Sc622-2c Firmware	All	All	All	All
Hardware	Siemens	Scalance Sc632-2c	-	All	All	All
Operating System	Siemens	Scalance Sc632-2c Firmware	All	All	All	All
Operating System	Siemens	Scalance Sc632-2c Firmware	All	All	All	All
Hardware	Siemens	Scalance Sc636-2c	-	All	All	All
Operating System	Siemens	Scalance Sc636-2c Firmware	All	All	All	All
Operating System	Siemens	Scalance Sc636-2c Firmware	All	All	All	All
Hardware	Siemens	Scalance Sc642-2c	-	All	All	All
Operating System	Siemens	Scalance Sc642-2c Firmware	All	All	All	All
Operating System	Siemens	Scalance Sc642-2c Firmware	All	All	All	All
Hardware	Siemens	Scalance Sc646-2c	-	All	All	All
Operating System	Siemens	Scalance Sc646-2c Firmware	All	All	All	All
Operating System	Siemens	Scalance Sc646-2c Firmware	All	All	All	All
Hardware	Siemens	Scalance X300wg	-	All	All	All
Operating System	Siemens	Scalance X300wg Firmware	All	All	All	All
Hardware	Siemens	Scalance Xb-200	-	All	All	All
Operating System	Siemens	Scalance Xb-200 Firmware	All	All	All	All
Hardware	Siemens	Scalance Xc-200	-	All	All	All
Operating System	Siemens	Scalance Xc-200 Firmware	All	All	All	All
Hardware	Siemens	Scalance Xf-200ba	-	All	All	All
Operating System	Siemens	Scalance Xf-200ba Firmware	All	All	All	All
Hardware	Siemens	Scalance Xm400	-	All	All	All
Operating System	Siemens	Scalance Xm400 Firmware	All	All	All	All
Hardware	Siemens	Scalance Xp-200	-	All	All	All
Operating System	Siemens	Scalance Xp-200 Firmware	All	All	All	All
Hardware	Siemens	Scalance Xr500	-	All	All	All
Operating System	Siemens	Scalance Xr500 Firmware	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Siemens	RUGGEDCOM RM1224	affected All versions >= V4.3 and < V6.4	Not specified
CNA	Siemens	SCALANCE M-800	affected All versions >= V4.3 and < V6.4	Not specified
CNA	Siemens	SCALANCE S615	affected All versions >= V4.3 and < V6.4	Not specified
CNA	Siemens	SCALANCE SC-600 Family	affected All versions >= V2.0 and < V2.1.3	Not specified
CNA	Siemens	SCALANCE XB-200	affected All versions < V4.1	Not specified
CNA	Siemens	SCALANCE XC-200	affected All versions < V4.1	Not specified
CNA	Siemens	SCALANCE XF-200BA	affected All versions < V4.1	Not specified
CNA	Siemens	SCALANCE XM400	affected All versions < V6.2	Not specified
CNA	Siemens	SCALANCE XP-200	affected All versions < V4.1	Not specified
CNA	Siemens	SCALANCE XR-300WG	affected All versions < V4.1	Not specified
CNA	Siemens	SCALANCE XR500	affected All versions < V6.2	Not specified

References

Reference	Source	Link	Tags
cert-portal.siemens.com/productcert/pdf/ssa-979775.pdf	af854a3a-2127-422b-91ae-364da2661108	cert-portal.siemens.com	Patch, Vendor Advisory
Siemens SCALANCE and RUGGEDCOM Devices \| CISA	af854a3a-2127-422b-91ae-364da2661108	us-cert.cisa.gov	Patch, Third Party Advisory, US Government Resource
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

590670 Siemens SCALANCE and RUGGEDCOM Devices (Update A) Vulnerability (ICSA-21-068-03)