CVE-2021-29998

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-29998
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf Third Party Advisory
https://support2.windriver.com/index.php?page=security-notices Vendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-194-12 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:siemens:ruggedcom_win_subscriber_station_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_win_subscriber_station:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:scalance_x200-4_p_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x200-4_p_irt:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x201-3p_irt:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:siemens:scalance_x202-2_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x202-2_irt:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:siemens:scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x202-2p_irt:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:siemens:scalance_x204_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204_irt:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:siemens:scalance_x204_irt_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204_irt_pro:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:siemens:scalance_x204-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204-2:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:siemens:scalance_x204-2fm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204-2fm:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:siemens:scalance_x204-2ld_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204-2ld:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:siemens:scalance_x204-2ld_ts_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204-2ld_ts:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:siemens:scalance_x204-2ts_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204-2ts:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:siemens:scalance_x206-1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x206-1:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:siemens:scalance_x206-1ld_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x206-1ld:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:siemens:scalance_x208_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x208:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:siemens:scalance_x208_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x208_pro:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:siemens:scalance_x212-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x212-2:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:siemens:scalance_x212-2ld_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x212-2ld:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:siemens:scalance_x216_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x216:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:siemens:scalance_x224_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x224:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:siemens:scalance_x408_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf201-3p_irt:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf202-2p_irt:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:siemens:scalance_xf204_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf204:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:siemens:scalance_xf204_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf204_irt:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:siemens:scalance_xf204-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf204-2:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:siemens:scalance_xf206-1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf206-1:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:siemens:scalance_xf208_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf208:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:siemens:simatic_rf_181_eip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_rf_181_eip:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:siemens:simatic_rf_182c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_rf_182c:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:siemens:sinamics_perfect_harmony_gh180_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_perfect_harmony_gh180:-:*:*:*:*:*:*:*
History

05 Oct 2022, 16:33

Type Values Removed Values Added
First Time Siemens sinamics Perfect Harmony Gh180
Siemens sinamics Perfect Harmony Gh180 Firmware
References (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf - (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf - Third Party Advisory
CPE cpe:2.3:o:siemens:sinamics_perfect_harmony_gh180_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_perfect_harmony_gh180:-:*:*:*:*:*:*:*

12 Jul 2022, 14:15

Type Values Removed Values Added
References
  • (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf -

22 Apr 2022, 18:55

Type Values Removed Values Added
References
  • (MISC) https://us-cert.cisa.gov/ics/advisories/icsa-21-194-12 - Third Party Advisory, US Government Resource
References (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf - (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf - Third Party Advisory
CPE cpe:2.3:h:siemens:simatic_rf_182c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x212-2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x208:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xf206-1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204-2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204-2ts:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x206-1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x224_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x200-4_p_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xf208_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf208:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x200-4_p_irt:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf204-2:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xf204_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_rf_182c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x208_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xf204-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_win_subscriber_station:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x202-2p_irt:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x204-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204-2fm:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf206-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x202-2_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_rf_181_eip:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204_irt:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x212-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x206-1ld:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_win_subscriber_station_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x208_pro:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x216_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204_irt_pro:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x206-1ld_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204-2ld_ts:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf204_irt:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x204-2ld:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x212-2ld_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x204-2fm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xf204_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x204-2ld_ts_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf204:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x204-2ts_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x212-2ld:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x408_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_rf_181_eip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf201-3p_irt:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x204-2ld_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x224:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xf202-2p_irt:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x204_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x216:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x201-3p_irt:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x206-1:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x208_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x202-2_irt:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x204_irt_pro_firmware:*:*:*:*:*:*:*:*
First Time Siemens
Siemens scalance X204-2fm
Siemens scalance X206-1ld Firmware
Siemens scalance X216
Siemens scalance Xf206-1 Firmware
Siemens simatic Rf 182c
Siemens scalance X212-2 Firmware
Siemens scalance X204-2fm Firmware
Siemens scalance X204-2ld
Siemens scalance X204 Irt
Siemens scalance Xf204 Firmware
Siemens scalance X206-1ld
Siemens scalance X202-2p Irt Firmware
Siemens scalance X408 Firmware
Siemens scalance X300 Firmware
Siemens scalance X204-2ts
Siemens simatic Rf 182c Firmware
Siemens scalance X201-3p Irt
Siemens scalance X204-2
Siemens scalance X204 Irt Pro
Siemens scalance Xf204 Irt Firmware
Siemens ruggedcom Win Subscriber Station Firmware
Siemens scalance X204-2ts Firmware
Siemens scalance Xf204-2
Siemens scalance X201-3p Irt Firmware
Siemens scalance Xf204
Siemens scalance X202-2p Irt Pro
Siemens scalance X216 Firmware
Siemens scalance X212-2ld
Siemens scalance X201-3p Irt Pro Firmware
Siemens scalance X208 Pro
Siemens scalance X224
Siemens scalance X200-4 P Irt
Siemens scalance X206-1
Siemens scalance Xf201-3p Irt Firmware
Siemens scalance X201-3p Irt Pro
Siemens scalance Xf204-2ba Irt Firmware
Siemens scalance Xf208
Siemens scalance X200-4 P Irt Firmware
Siemens scalance X208 Pro Firmware
Siemens scalance Xf204-2 Firmware
Siemens scalance X204-2ld Ts Firmware
Siemens ruggedcom Win Subscriber Station
Siemens scalance X208 Firmware
Siemens simatic Rf 181 Eip
Siemens scalance X300
Siemens scalance X204-2ld Ts
Siemens scalance X204-2 Firmware
Siemens simatic Rf 181 Eip Firmware
Siemens scalance X212-2ld Firmware
Siemens scalance X202-2 Irt
Siemens scalance X202-2p Irt Pro Firmware
Siemens scalance Xf202-2p Irt Firmware
Siemens scalance X202-2 Irt Firmware
Siemens scalance Xf208 Firmware
Siemens scalance Xf201-3p Irt
Siemens scalance X202-2p Irt
Siemens scalance X204 Irt Pro Firmware
Siemens scalance X206-1 Firmware
Siemens scalance X208
Siemens scalance X224 Firmware
Siemens scalance X204 Irt Firmware
Siemens scalance Xf204 Irt
Siemens scalance Xf204-2ba Irt
Siemens scalance X204-2ld Firmware
Siemens scalance X408
Siemens scalance X212-2
Siemens scalance Xf202-2p Irt
Siemens scalance Xf206-1

30 Jul 2021, 19:15

Type Values Removed Values Added
References
  • (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf -

16 Apr 2021, 19:06

Type Values Removed Values Added
References (MISC) https://support2.windriver.com/index.php?page=security-notices - (MISC) https://support2.windriver.com/index.php?page=security-notices - Vendor Advisory
CPE cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*
CWE CWE-787
CVSS v2 : unknown
v3 : unknown 		v2 : 7.5
v3 : 9.8

13 Apr 2021, 17:21

Type Values Removed Values Added
New CVE
Information

Published : 2021-04-13 17:15

Updated : 2023-12-10 13:55

NVD link : CVE-2021-29998

Mitre link : CVE-2021-29998

CVE.ORG link : CVE-2021-29998

JSON object : View

Products Affected

siemens

  • scalance_x202-2p_irt_pro
  • simatic_rf_182c
  • scalance_xf204
  • scalance_x204-2_firmware
  • scalance_x204-2ts
  • scalance_x216_firmware
  • scalance_x204-2ld_firmware
  • scalance_xf201-3p_irt
  • ruggedcom_win_subscriber_station_firmware
  • scalance_xf204_irt
  • scalance_x204-2fm_firmware
  • scalance_x300
  • scalance_xf202-2p_irt_firmware
  • scalance_xf206-1
  • sinamics_perfect_harmony_gh180
  • ruggedcom_win_subscriber_station
  • scalance_x212-2ld_firmware
  • scalance_x204-2
  • scalance_x204-2fm
  • scalance_x408
  • sinamics_perfect_harmony_gh180_firmware
  • scalance_xf208_firmware
  • scalance_xf201-3p_irt_firmware
  • scalance_x204-2ld
  • scalance_x200-4_p_irt
  • scalance_x201-3p_irt_pro
  • scalance_xf202-2p_irt
  • scalance_x200-4_p_irt_firmware
  • simatic_rf_182c_firmware
  • scalance_x208_firmware
  • scalance_x202-2_irt_firmware
  • scalance_xf204_irt_firmware
  • scalance_x202-2p_irt
  • simatic_rf_181_eip
  • scalance_xf204-2ba_irt_firmware
  • scalance_x224
  • scalance_x204-2ld_ts_firmware
  • scalance_x202-2_irt
  • scalance_x208
  • scalance_x202-2p_irt_firmware
  • scalance_x212-2_firmware
  • scalance_x204_irt_pro_firmware
  • scalance_x204_irt
  • scalance_x212-2
  • scalance_x408_firmware
  • scalance_x300_firmware
  • scalance_xf206-1_firmware
  • simatic_rf_181_eip_firmware
  • scalance_x224_firmware
  • scalance_x216
  • scalance_x204-2ts_firmware
  • scalance_x206-1_firmware
  • scalance_x204-2ld_ts
  • scalance_x201-3p_irt_pro_firmware
  • scalance_xf204-2ba_irt
  • scalance_x204_irt_firmware
  • scalance_xf204_firmware
  • scalance_xf204-2_firmware
  • scalance_x201-3p_irt_firmware
  • scalance_xf208
  • scalance_x208_pro
  • scalance_x212-2ld
  • scalance_x204_irt_pro
  • scalance_xf204-2
  • scalance_x206-1ld
  • scalance_x201-3p_irt
  • scalance_x206-1ld_firmware
  • scalance_x206-1
  • scalance_x208_pro_firmware
  • scalance_x202-2p_irt_pro_firmware

windriver

  • vxworks
CWE
CWE-787

Out-of-bounds Write