Buffer Overflow Vulnerability in RUGGEDCOM RM1224 and SCALANCE Products

CVE-2021-25667

What is CVE-2021-25667?

A stack-based buffer overflow vulnerability exists in specific RUGGEDCOM RM1224 and SCALANCE devices when handling STP BPDU frames. If exploited, a remote attacker could trigger a denial-of-service condition or potentially execute arbitrary code. The successful exploitation of this vulnerability depends on the passive listening feature being enabled on the device. Affected products include various models within the RUGGEDCOM and SCALANCE families, all of which are susceptible to this severe security loophole.

References