critical9.8
CVE-2021-29998
An issue was discovered in Wind River VxWorks before 6.5.
Impact
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Windriver | Vxworks | before 6.5 |
| Siemens | Ruggedcom Win Subscriber Station Firmware | All versions |
| Siemens | Scalance X200-4 P Irt Firmware | All versions |
| Siemens | Scalance X201-3p Irt Firmware | All versions |
| Siemens | Scalance X201-3p Irt Pro Firmware | All versions |
| Siemens | Scalance X202-2 Irt Firmware | All versions |
| Siemens | Scalance X202-2p Irt Firmware | All versions |
| Siemens | Scalance X202-2p Irt Pro Firmware | All versions |
| Siemens | Scalance X204 Irt Firmware | All versions |
| Siemens | Scalance X204 Irt Pro Firmware | All versions |
| Siemens | Scalance X204-2 Firmware | All versions |
| Siemens | Scalance X204-2fm Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf
- https://support2.windriver.com/index.php?page=security-notices
- https://us-cert.cisa.gov/ics/advisories/icsa-21-194-12
- https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf
- https://support2.windriver.com/index.php?page=security-notices
- https://us-cert.cisa.gov/ics/advisories/icsa-21-194-12