Out-of-Bounds Read and Write Vulnerability in Siemens APOGEE and Desigo Products
CVE-2021-31884

9.8CRITICAL

Key Information:

Vendor: Siemens
Status: Apogee Mbc (ppc) (bacnet); Apogee Mbc (ppc) (p2 Ethernet); Apogee Mec (ppc) (bacnet); Apogee Mec (ppc) (p2 Ethernet)
Vendor: CVE Published:; 9 November 2021

What is CVE-2021-31884?

A flaw in various Siemens products allows for out-of-bounds read and write operations due to improper handling of the 'Hostname' DHCP option. This vulnerability can lead to potential information leakage and denial-of-service conditions when the global hostname variable is not defined. Attackers exploiting this vulnerability may gain unauthorized access or disrupt service, affecting operational continuity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch