9.8
CVE-2021-33719
- EPSS 0.56%
- Published 14.09.2021 11:15:24
- Last modified 21.11.2024 06:09:26
- Source productcert@siemens.com
- Teams watchlist Login
- Open Login
A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution.
Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Siprotec 5 With Cpu Variant Cp050 Version < 8.80
Siemens ≫ Siprotec 5 With Cpu Variant Cp100 Version < 8.80
Siemens ≫ Siprotec 5 With Cpu Variant Cp300 Version < 8.80
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.56% | 0.655 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.