Out-of-Bounds Read and Write Vulnerability in Siemens APOGEE and Desigo Products
CVE-2021-31884
9.8CRITICAL
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 9 November 2021
What is CVE-2021-31884?
A flaw in various Siemens products allows for out-of-bounds read and write operations due to improper handling of the 'Hostname' DHCP option. This vulnerability can lead to potential information leakage and denial-of-service conditions when the global hostname variable is not defined. Attackers exploiting this vulnerability may gain unauthorized access or disrupt service, affecting operational continuity.
Affected Version(s)
APOGEE MBC (PPC) (BACnet) All versions
APOGEE MBC (PPC) (P2 Ethernet) All versions
APOGEE MEC (PPC) (BACnet) All versions