CVE-2021-37199: High severity Siemens Sinumerik 808d Firmware vulnerability
Published Oct 12, 2021
·Updated
A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial-of-service in the device.
Affected Software
8 affected components
Siemens Sinumerik 808d Firmware
Siemens Sinumerik 808d
Siemens Sinumerik 828d Firmware<4.95
Siemens Sinumerik 828d
All of the following
Siemens Sinumerik 808d Firmware
Siemens Sinumerik 808d
All of the following
Siemens Sinumerik 828d Firmware<4.95
Siemens Sinumerik 828d
Event History
Oct 12, 2021
CVE Published
via MITRE·09:49 AM
Data Sourced
via MITRE·09:49 AM
DescriptionWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this SINUMERIK vulnerability?
The vulnerability ID for this SINUMERIK vulnerability is CVE-2021-37199.
2
What is the severity of CVE-2021-37199?
The severity of CVE-2021-37199 is high with a CVSS score of 7.5.
3
Which devices are affected by CVE-2021-37199?
SINUMERIK 808D (All versions) and SINUMERIK 828D (All versions < V4.95) are affected by CVE-2021-37199.
4
What is the impact of CVE-2021-37199?
CVE-2021-37199 could allow an attacker to cause a denial-of-service in the affected SINUMERIK devices.
5
Is there a fix available for CVE-2021-37199?
Please refer to the vendor's advisory for information on available patches or fixes for CVE-2021-37199.