CVE Feed

    Dashboard / CVE / CVE-2021-25676

    CVE-2021-25676

    A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.

    Published:Mar 15, 2021
    Last Modified:Nov 21, 2024
    EPS:Mar 15, 2021
    EPSS Score:0.00242
    CVSS Score:7.5

    Affected Products

    Vendor
    Siemens
    Product
    Ruggedcom Rm1224
    Vendor
    Siemens
    Product
    Ruggedcom Rm1224 Firmware
    Vendor
    Siemens
    Product
    Scalance M-800
    Vendor
    Siemens
    Product
    Scalance M-800 Firmware
    Vendor
    Siemens
    Product
    Scalance S615
    Vendor
    Siemens
    Product
    Scalance S615 Firmware
    Vendor
    Siemens
    Product
    Scalance Sc-600
    Vendor
    Siemens
    Product
    Scalance Sc-600 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-31766 (CVSS 8.6) — A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2…
    CVE-2020-28400 (CVSS 8.7) — Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of servic…
    CVE-2021-25667 (CVSS 8.8) — A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All…
    CVE-2019-13946 (CVSS 7.5) — Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multipl…
    CVE-2018-5391 (CVSS 7.5) — The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modif…
    CVE-2017-14491 (CVSS 9.8) — Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash)…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High