CVE-2021-31345 HIGH

CVE-2021-31345

Vendor Siemens
Product Capital Embedded AR Classic 431-422
Weakness CWE-1284
Published November 9, 2021
Last update March 11, 2025
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions). The total length of an UDP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on a user-defined applications that runs on top of the UDP protocol. (FSMD-2021-0006)

Key dates

02Disclosure timeline

November 9, 2021 CVE published
March 11, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-42657 WordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerability CVE-2022-0414 Improper Validation of Specified Quantity in Input in dolibarr/dolibarr CVE-2025-3756 Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850 CVE-2026-26934 Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service CVE-2013-0270 Keystone: openstack keystone: denial of service via large http request with long tenant name