High severity · published Apr 20, 2022
CVE-2021-37740
A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote…
7.5
CVSS
4.6%
EPSS
No
On KEV
Description
A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a SESSION_REQUEST frame with a modified total length field.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.6% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SF
Scn-ip000.03 Firmware · Mdt
before 3.0.4 · source: NVD
SF
Scn-ip100.03 Firmware · Mdt
before 3.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-37740
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-37740
Exploit
https://github.com/robertguetzkow/CVE-2021-37740
Broken Link
https://www.mdt.de/EN_IP_Interface_Router.html
Release Notes
https://www.mdt.de/download/MDT_CL_SCN_IP_03_IP_Interface_Router.pdf