Heap Overflow Vulnerability in RUGGEDCOM Network Devices by Siemens

CVE-2021-42018

What is CVE-2021-42018?

The identified vulnerability in Siemens RUGGEDCOM network devices stems from improper handling of memory allocation requests within a third-party component. When an out of bound size is requested, the allocated buffer may not correspond correctly, resulting in a heap overflow. This situation can be exploited by attackers, potentially allowing them to execute arbitrary code or disrupt device operational integrity.

References