CVE-2021-31886

highPriorität · verfolgen · 40Stack-Kampagne · NUCLEUS:13EPSS 0.031 · 88. PerzentilDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

3.08% (88th) EPSS

CVSS 7.5 · high

Is it mine?

163 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-26

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.4), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.19), Desigo PXC00-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC00-U (All versions >= V2.3 and < V6.30.016), Desigo PXC001-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC100-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC12-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC128-U (All versions >= V2.3 and < V6.30.016), Desigo PXC200-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC22-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC22.1-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC36.1-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC50-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC64-U (All versions >= V2.3 and < V6.30.016), Desigo PXM20-E (All versions >= V2.3 and < V6.30.016), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus Source Code (All versions), TALON TC Compact (BACnet) (All versions < V3.5.4), TALON TC Modular (BACnet) (All versions < V3.5.4). FTP server does not properly validate the length of the “USER” command, leading to stack-based buffer overflows. This may result in Denial-of-Service conditions and Remote Code Execution. (FSMD-2021-0010)

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenNucleus ReadyStart V3siemens_psirt
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/
BehobenNucleus Source Codesiemens_psirt
Contact customer support to receive patch and update information
BehobenAPOGEE PXC Compact (BACnet)siemens_psirt
Update to V3.5.4 or later version
BehobenAPOGEE PXC Compact (P2 Ethernet)siemens_psirt
Update to V2.8.19 or later version
BehobenAPOGEE PXC Modular (BACnet)siemens_psirt
Update to V3.5.4 or later version
BehobenAPOGEE PXC Modular (P2 Ethernet)siemens_psirt
Update to V2.8.19 or later version
BehobenDesigo PXC00-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC00-Usiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC001-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC100-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC12-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC128-Usiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC200-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC22-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC22.1-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC36.1-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC50-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC64-Usiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXM20-Esiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenTALON TC Compact (BACnet)siemens_psirt
Update to V3.5.4 or later version
BehobenTALON TC Modular (BACnet)siemens_psirt
Update to V3.5.4 or later version
Behobenwago_psirt
For fieldbus coupler: - 750-332 - 750-362/xxx-xxx - 750-363/xxx-xxx - 750-364/xxx-xxx - 750-365/xxx-xxx For PLCs: - 750-823 - 750-832/xxx-xxx - 750-862 - 750-890/xxx-xxx - 750-891 - 750-893 We recommend all effected users to update to the firmware version listed below: | Article Number | Fixed in Firmware Version | Availability | |----------------------|----------------------------|---------------------------| | 750-823 | >=FW10 | January 2022 | | 750-832/000-00x | >=FW10 | After BACnet certification| | 750-862 | >=FW10 | January 2022 | | 750-890/xxx-xxx | >=FW10 | January 2022 | | 750-891 | >=FW10 | January 2022 | | 750-893 | >=FW10 | January 2022 | | 750-332 | >=FW10 | After BACnet certification| | 750-362/xxx-xxx | >=FW10 | January 2022 | | 750-363/xxx-xxx | >=FW10 | January 2022 | | 750-364/xxx-xxx | >=FW10 | January 2022 | | 750-365/xxx-xxx | >=FW10 | January 2022 |
BehobenNucleus ReadyStart V3cisa_csaf_ot
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/
BehobenNucleus Source Codecisa_csaf_ot
Contact customer support to receive patch and update information
BehobenAPOGEE PXC Compact (BACnet)cisa_csaf_ot
Update to V3.5.4 or later version
BehobenAPOGEE PXC Compact (P2 Ethernet)cisa_csaf_ot
Update to V2.8.19 or later version
BehobenAPOGEE PXC Modular (BACnet)cisa_csaf_ot
Update to V3.5.4 or later version
BehobenAPOGEE PXC Modular (P2 Ethernet)cisa_csaf_ot
Update to V2.8.19 or later version
BehobenDesigo PXC00-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC00-Ucisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC001-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC100-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC12-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC128-Ucisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC200-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC22-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC22.1-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC36.1-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC50-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXC64-Ucisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenDesigo PXM20-Ecisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
BehobenTALON TC Compact (BACnet)cisa_csaf_ot
Update to V3.5.4 or later version
BehobenTALON TC Modular (BACnet)cisa_csaf_ot
Update to V3.5.4 or later version
MitigationNucleus NETsiemens_psirt
Contact customer support or your local Nucleus Sales team for mitigation advice
MitigationAPOGEE MBC (PPC) (BACnet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE MBC (PPC) (P2 Ethernet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE MEC (PPC) (BACnet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE MEC (PPC) (P2 Ethernet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Compact (BACnet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Compact (P2 Ethernet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Modular (BACnet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Modular (P2 Ethernet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC00-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC00-Usiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC001-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC100-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC12-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC128-Usiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC200-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC22-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC22.1-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC36.1-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC50-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC64-Usiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXM20-Esiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationTALON TC Compact (BACnet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationTALON TC Modular (BACnet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
Mitigationwago_psirt
1. Use general security best practices to protect systems from local and network attacks. 2. Do not allow direct access to the device from untrusted networks. 3. Update to the latest firmware according to the table in chapter solutions. 4. Disable the DHCP, DNS and the FTP port 21. 5. Industrial control systems (ICS) should not be directly accessible from the Internet, but should be protected by consistently applying the defense-in-depth strategy. The BSI provides general information on securing ICS in the ICS Compendium [BSI2013] and on the official BSI website [BSI2021]. For fieldbus coupler: - 750-331 - 750-352/xxx-xxx For PLCs: - 750-829 - 750-831/xxx-xxx - 750-852 - 750-880/xxx-xxx - 750-881 - 750-889 The listed fieldbus coupler and PLCs above are based on Nucleus V1 RTOS. At the moment there are no updates for this version available. Due to this reason WAGO recommends according to the recommendations of the BSI to implement the following measures: 1. Enforce segmentation controls and proper network hygiene to reduce the risk of vulnerable devices. Restrict external communication paths and isolate vulnerable devices in zones as a mitigating measure. 2. Ensure DHCP responses from non-authorized servers are blocked or discarded. 3. Monitor network traffic for anomalies and discard invalid packets. 4. Disable or block FTP, DHCP, DNS especially on critical network segments 5. Please check regularly https://certvde.com/de/ for an update of this Advisory.
MitigationNucleus NETcisa_csaf_ot
Contact customer support or your local Nucleus Sales team for mitigation advice
MitigationAPOGEE MBC (PPC) (BACnet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE MBC (PPC) (P2 Ethernet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE MEC (PPC) (BACnet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE MEC (PPC) (P2 Ethernet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Compact (BACnet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Compact (P2 Ethernet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Modular (BACnet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Modular (P2 Ethernet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC00-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC00-Ucisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC001-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC100-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC12-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC128-Ucisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC200-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC22-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC22.1-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC36.1-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC50-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC64-Ucisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXM20-Ecisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationTALON TC Compact (BACnet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationTALON TC Modular (BACnet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
Kein Fix geplantNucleus NETsiemens_psirt
Currently no remediation is planned
Kein Fix geplantAPOGEE MBC (PPC) (BACnet)siemens_psirt
Currently no fix is planned
Kein Fix geplantAPOGEE MBC (PPC) (P2 Ethernet)siemens_psirt
Currently no fix is planned
Kein Fix geplantAPOGEE MEC (PPC) (BACnet)siemens_psirt
Currently no fix is planned
Kein Fix geplantAPOGEE MEC (PPC) (P2 Ethernet)siemens_psirt
Currently no fix is planned
Kein Fix geplantNucleus NETcisa_csaf_ot
Currently no remediation is planned
Kein Fix geplantAPOGEE MBC (PPC) (BACnet)cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantAPOGEE MBC (PPC) (P2 Ethernet)cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantAPOGEE MEC (PPC) (BACnet)cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantAPOGEE MEC (PPC) (P2 Ethernet)cisa_csaf_ot
Currently no fix is planned

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · WAGO PSIRT DE

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-170USCWE-170USCWE-170USCWE-170USCWE-170USCWE-787USCWE-787US

betroffene Produkte (163)

Betroffene Produkte und Versionsbereiche.

APOGEE MBC (PPC) (BACnet)alle Versionencisa_csaf_otUS
APOGEE MBC (PPC) (P2 Ethernet)alle Versionencisa_csaf_otUS
APOGEE MEC (PPC) (BACnet)alle Versionencisa_csaf_otUS
APOGEE MEC (PPC) (P2 Ethernet)alle Versionencisa_csaf_otUS
APOGEE PXC Compact (BACnet)alle Versionencisa_csaf_otUS
APOGEE PXC Compact (P2 Ethernet)alle Versionencisa_csaf_otUS
APOGEE PXC Modular (BACnet)alle Versionencisa_csaf_otUS
APOGEE PXC Modular (P2 Ethernet)alle Versionencisa_csaf_otUS
Desigo PXC00-E.Dalle Versionencisa_csaf_otUS
Desigo PXC00-Ualle Versionencisa_csaf_otUS
Desigo PXC001-E.Dalle Versionencisa_csaf_otUS
Desigo PXC100-E.Dalle Versionencisa_csaf_otUS
Desigo PXC12-E.Dalle Versionencisa_csaf_otUS
Desigo PXC128-Ualle Versionencisa_csaf_otUS
Desigo PXC200-E.Dalle Versionencisa_csaf_otUS
Desigo PXC22-E.Dalle Versionencisa_csaf_otUS
Desigo PXC22.1-E.Dalle Versionencisa_csaf_otUS
Desigo PXC36.1-E.Dalle Versionencisa_csaf_otUS
Desigo PXC50-E.Dalle Versionencisa_csaf_otUS
Desigo PXC64-Ualle Versionencisa_csaf_otUS

20 von 163 angezeigt

Advisories (5)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-044112SSA-044112: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS2021-11-09csaf · siemens_psirtDE
The TCP/IP stack and related services (FTP, TFTP) of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contain several vulnerabilities, also known as "NUCLEUS:13" and as documented below. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not available.
SSA-114589SSA-114589: Multiple Vulnerabilities in Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products2021-11-09csaf · siemens_psirtDE
Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. The products listed below use affected versions of the Nucleus software and inherently contain these vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
VDE-2021-050WAGO: Multiple devices affected by Vulnerabilities in NUCLEUS TCP Stack.2021-11-16csaf · wago_psirtDE
Multiple vulnerabilities were reported in the Nucleus Real-Time Operating System (RTOS). The Nucleus RTOS is an essential component in several WAGO PLCs and fieldbus coupler. WAGO uses older Versions of the Nucleus RTOS also in legacy products. For additional information please consult the official Siemens advisory: • Advisory SSA-044112
ICSA-21-313-03Siemens Nucleus RTOS TCP/IP Stack2021-11-09icsa · cisa_csaf_otUS
The TCP/IP stack and related services (FTP, TFTP) of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contain several vulnerabilities, also known as "NUCLEUS:13" and as documented below. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not available.
ICSA-21-315-07Siemens Nucleus RTOS-based APOGEE and TALON Products (Update C)2021-11-09icsa · cisa_csaf_otUS
Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. The products listed below use affected versions of the Nucleus software and inherently contain these vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt wago_psirt NVD CVE.org MITRE

veröffentlicht 2021-11-09geändert 2026-06-17

Referenzen (11)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan