CVE-2021-37182
mediumPriorität · verfolgen · 30EPSS 0.006 · 50. PerzentilDEEURUUSEPSS · bewertet 2026-10-27
A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5), SCALANCE XM416-4C (All versions < V6.5), SCALANCE XM416-4C (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 1x230V (All versions < V6.5), SCALANCE XR524-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 24V (All versions < V6.5), SCALANCE XR524-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 2x230V (All versions < V6.5), SCALANCE XR524-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 1x230V (All versions < V6.5), SCALANCE XR526-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 24V (All versions < V6.5), SCALANCE XR526-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 2x230V (All versions < V6.5), SCALANCE XR526-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR528-6M (All versions < V6.5), SCALANCE XR528-6M (2HR2) (All versions < V6.5), SCALANCE XR528-6M (2HR2, L3 int.) (All versions < V6.5), SCALANCE XR528-6M (L3 int.) (All versions < V6.5), SCALANCE XR552-12M (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2, L3 int.) (All versions < V6.5). The OSPF protocol implementation in affected devices fails to verify the checksum and length fields in the OSPF LS Update messages. An unauthenticated remote attacker could exploit this vulnerability to cause interruptions in the network by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSCALANCE XM408-4Csiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM408-4C (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM408-8Csiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM408-8C (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM416-4Csiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM416-4C (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 1x230Vsiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 1x230V (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 24Vsiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 24V (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 2x230Vsiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 2x230V (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 1x230Vsiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 1x230V (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 24Vsiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 24V (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 2x230Vsiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 2x230V (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR528-6Msiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR528-6M (2HR2)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR528-6M (2HR2, L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR528-6M (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR552-12Msiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR552-12M (2HR2)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR552-12M (2HR2, L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM408-4Ccisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM408-4C (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM408-8Ccisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM408-8C (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM416-4Ccisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM416-4C (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 1x230Vcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 1x230V (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 24Vcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 24V (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 2x230Vcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 2x230V (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 1x230Vcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 1x230V (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 24Vcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 24V (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 2x230Vcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 2x230V (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR528-6Mcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR528-6M (2HR2)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR528-6M (2HR2, L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR528-6M (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR552-12Mcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR552-12M (2HR2)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR552-12M (2HR2, L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - MitigationSCALANCE XM408-4Csiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-4C (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-8Csiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-8C (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM416-4Csiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM416-4C (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 1x230Vsiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 1x230V (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 24Vsiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 24V (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 2x230Vsiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 2x230V (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 1x230Vsiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 1x230V (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 24Vsiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 24V (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 2x230Vsiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 2x230V (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6Msiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M (2HR2)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M (2HR2, L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR552-12Msiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR552-12M (2HR2)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR552-12M (2HR2, L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-4Ccisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-4C (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-8Ccisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-8C (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM416-4Ccisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM416-4C (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 1x230Vcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 1x230V (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 24Vcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 24V (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 2x230Vcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 2x230V (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 1x230Vcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 1x230V (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 24Vcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 24V (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 2x230Vcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 2x230V (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6Mcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M (2HR2)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M (2HR2, L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR552-12Mcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR552-12M (2HR2)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR552-12M (2HR2, L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.3–7.5
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (124)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-145224SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices2022-06-14csaf · siemens_psirtDE
SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to cause interruptions in the network. Siemens has released updates for the affected products and recommends to update to the latest versions.
- ICSA-22-167-10Siemens SCALANCE XM-400 and XR-5002022-06-14icsa · cisa_csaf_otUS
SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to cause interruptions in the network. Siemens has released updates for the affected products and recommends to update to the latest versions.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (5)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert-portal.siemens.com/productcert/pdf/ssa-145224.pdfcnnvd
- https://cxsecurity.com/cveshow/CVE-2021-37182/cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-22-167-10cnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-145224.pdfenisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-145224.pdfPatchVendor Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan