A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an ICMP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0007)
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Capital Embedded AR Classic 431-422
Vendor
Siemens
Product
Capital Embedded AR Classic 431-422
Platforms
Unknown
Default status
unknown
Capital Embedded AR Classic 431-422 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
*
Unavailable
None listed
Capital Embedded AR Classic R20-11
Vendor
Siemens
Product
Capital Embedded AR Classic R20-11
Platforms
Unknown
Default status
unknown
Capital Embedded AR Classic R20-11 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2303
Unavailable
None listed
PLUSCONTROL 1st Gen
Vendor
Siemens
Product
PLUSCONTROL 1st Gen
Platforms
Unknown
Default status
unknown
PLUSCONTROL 1st Gen · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
SIMOTICS CONNECT 400
Vendor
Siemens
Product
SIMOTICS CONNECT 400
Platforms
Unknown
Default status
unknown
SIMOTICS CONNECT 400 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V0.5.0.0
affected
Unavailable
Unavailable
Unavailable
None listed
SIMOTICS CONNECT 400
Vendor
Siemens
Product
SIMOTICS CONNECT 400
Platforms
Unknown
Default status
unknown
SIMOTICS CONNECT 400 · Scoped product and version facts