CVE-2021-31887

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2021
Source publication: Nov 9, 2021
Source updated: Aug 3, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.4), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.19), Desigo PXC00-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC00-U (All versions >= V2.3 and < V6.30.016), Desigo PXC001-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC100-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC12-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC128-U (All versions >= V2.3 and < V6.30.016), Desigo PXC200-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC22-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC22.1-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC36.1-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC50-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC64-U (All versions >= V2.3 and < V6.30.016), Desigo PXM20-E (All versions >= V2.3 and < V6.30.016), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus Source Code (All versions), TALON TC Compact (BACnet) (All versions < V3.5.4), TALON TC Modular (BACnet) (All versions < V3.5.4). FTP server does not properly validate the length of the “PWD/XPWD” command, leading to stack-based buffer overflows. This may result in Denial-of-Service conditions and Remote Code Execution. (FSMD-2021-0016)

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

APOGEE MBC (PPC) (BACnet)

Vendor: Siemens
Product: APOGEE MBC (PPC) (BACnet)
Platforms: Unknown
Default status: Unknown

APOGEE MBC (PPC) (BACnet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

APOGEE MBC (PPC) (P2 Ethernet)

Vendor: Siemens
Product: APOGEE MBC (PPC) (P2 Ethernet)
Platforms: Unknown
Default status: Unknown

APOGEE MBC (PPC) (P2 Ethernet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

APOGEE MEC (PPC) (BACnet)

Vendor: Siemens
Product: APOGEE MEC (PPC) (BACnet)
Platforms: Unknown
Default status: Unknown

APOGEE MEC (PPC) (BACnet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

APOGEE MEC (PPC) (P2 Ethernet)

Vendor: Siemens
Product: APOGEE MEC (PPC) (P2 Ethernet)
Platforms: Unknown
Default status: Unknown

APOGEE MEC (PPC) (P2 Ethernet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

APOGEE PXC Compact (BACnet)

Vendor: Siemens
Product: APOGEE PXC Compact (BACnet)
Platforms: Unknown
Default status: Unknown

APOGEE PXC Compact (BACnet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V3.5.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

APOGEE PXC Compact (P2 Ethernet)

Vendor: Siemens
Product: APOGEE PXC Compact (P2 Ethernet)
Platforms: Unknown
Default status: Unknown

APOGEE PXC Compact (P2 Ethernet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V2.8.19	`affected`	Unavailable	Unavailable	Unavailable	None listed

APOGEE PXC Modular (BACnet)

Vendor: Siemens
Product: APOGEE PXC Modular (BACnet)
Platforms: Unknown
Default status: Unknown

APOGEE PXC Modular (BACnet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V3.5.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

APOGEE PXC Modular (P2 Ethernet)

Vendor: Siemens
Product: APOGEE PXC Modular (P2 Ethernet)
Platforms: Unknown
Default status: Unknown

APOGEE PXC Modular (P2 Ethernet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V2.8.19	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXC00-E.D

Vendor: Siemens
Product: Desigo PXC00-E.D
Platforms: Unknown
Default status: Unknown

Desigo PXC00-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXC00-U

Vendor: Siemens
Product: Desigo PXC00-U
Platforms: Unknown
Default status: Unknown

Desigo PXC00-U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXC001-E.D

Vendor: Siemens
Product: Desigo PXC001-E.D
Platforms: Unknown
Default status: Unknown

Desigo PXC001-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXC100-E.D

Vendor: Siemens
Product: Desigo PXC100-E.D
Platforms: Unknown
Default status: Unknown

Desigo PXC100-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXC12-E.D

Vendor: Siemens
Product: Desigo PXC12-E.D
Platforms: Unknown
Default status: Unknown

Desigo PXC12-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXC128-U

Vendor: Siemens
Product: Desigo PXC128-U
Platforms: Unknown
Default status: Unknown

Desigo PXC128-U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXC200-E.D

Vendor: Siemens
Product: Desigo PXC200-E.D
Platforms: Unknown
Default status: Unknown

Desigo PXC200-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXC22-E.D

Vendor: Siemens
Product: Desigo PXC22-E.D
Platforms: Unknown
Default status: Unknown

Desigo PXC22-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXC22.1-E.D

Vendor: Siemens
Product: Desigo PXC22.1-E.D
Platforms: Unknown
Default status: Unknown

Desigo PXC22.1-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXC36.1-E.D

Vendor: Siemens
Product: Desigo PXC36.1-E.D
Platforms: Unknown
Default status: Unknown

Desigo PXC36.1-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXC50-E.D

Vendor: Siemens
Product: Desigo PXC50-E.D
Platforms: Unknown
Default status: Unknown

Desigo PXC50-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXC64-U

Vendor: Siemens
Product: Desigo PXC64-U
Platforms: Unknown
Default status: Unknown

Desigo PXC64-U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Desigo PXM20-E

Vendor: Siemens
Product: Desigo PXM20-E
Platforms: Unknown
Default status: Unknown

Desigo PXM20-E · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions >= V2.3 and < V6.30.016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Nucleus NET

Vendor: Siemens
Product: Nucleus NET
Platforms: Unknown
Default status: Unknown

Nucleus NET · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Nucleus ReadyStart V3

Vendor: Siemens
Product: Nucleus ReadyStart V3
Platforms: Unknown
Default status: Unknown

Nucleus ReadyStart V3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V2017.02.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

Nucleus Source Code

Vendor: Siemens
Product: Nucleus Source Code
Platforms: Unknown
Default status: Unknown

Nucleus Source Code · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

TALON TC Compact (BACnet)

Vendor: Siemens
Product: TALON TC Compact (BACnet)
Platforms: Unknown
Default status: Unknown

TALON TC Compact (BACnet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V3.5.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

TALON TC Modular (BACnet)

Vendor: Siemens
Product: TALON TC Modular (BACnet)
Platforms: Unknown
Default status: Unknown

TALON TC Modular (BACnet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V3.5.4	`affected`	Unavailable	Unavailable	Unavailable	None listed