High severity · published Jun 14, 2022
CVE-2021-37182
A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5),…
7.5
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5), SCALANCE XM416-4C (All versions < V6.5), SCALANCE XM416-4C (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 1x230V (All versions < V6.5), SCALANCE XR524-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 24V (All versions < V6.5), SCALANCE XR524-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 2x230V (All versions < V6.5), SCALANCE XR524-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 1x230V (All versions < V6.5), SCALANCE XR526-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 24V (All versions < V6.5), SCALANCE XR526-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 2x230V (All versions < V6.5), SCALANCE XR526-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR528-6M (All versions < V6.5), SCALANCE XR528-6M (2HR2) (All versions < V6.5), SCALANCE XR528-6M (2HR2, L3 int.) (All versions < V6.5), SCALANCE XR528-6M (L3 int.) (All versions < V6.5), SCALANCE XR552-12M (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2, L3 int.) (All versions < V6.5). The OSPF protocol implementation in affected devices fails to verify the checksum and length fields in the OSPF LS Update messages. An unauthenticated remote attacker could exploit this vulnerability to cause interruptions in the network by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SX
Scalance Xm408-4c Firmware · Siemens
before 6.5 · source: NVD
SX
Scalance Xm408-4c L3 Firmware · Siemens
before 6.5 · source: NVD
SX
Scalance Xm408-8c Firmware · Siemens
before 6.5 · source: NVD
SX
Scalance Xm408-8c L3 Firmware · Siemens
before 6.5 · source: NVD
SX
Scalance Xm416-4c Firmware · Siemens
before 6.5 · source: NVD
SX
Scalance Xm416-4c L3 Firmware · Siemens
before 6.5 · source: NVD
SX
Scalance Xr524-8c Firmware · Siemens
before 6.5; before 6.5; before 6.5; before 6.5 · source: NVD
SX
Scalance Xr524-8c L3 Firmware · Siemens
before 6.5; before 6.5; before 6.5; before 6.5 · source: NVD
SX
Scalance Xr526-8c Firmware · Siemens
before 6.5; before 6.5; before 6.5; before 6.5 · source: NVD
SX
Scalance Xr526-8c L3 Firmware · Siemens
before 6.5; before 6.5; before 6.5; before 6.5 · source: NVD
SX
Scalance Xr528-6m 2hr2 Firmware · Siemens
before 6.5 · source: NVD
SX
Scalance Xr528-6m 2hr2 L3 Firmware · Siemens
before 6.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-37182
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-37182
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-145224.pdf
More from Scalance Xm408-4c Firmware
9.1
CVE-2022-36323
Affected devices do not properly sanitize an input field
7.5
CVE-2022-36324
Affected devices do not properly handle the renegotiation of SSL/TLS parameters
7.5
CVE-2020-28393
An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets
4.8
CVE-2022-36325
Affected devices do not properly sanitize data introduced by an user when rendering the web interface