CVE-2021-33719 - OpenCVE

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:N/C:P/I:P/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Siemens	Siprotec 5 With Cpu Variant Cp050 Siprotec 5 With Cpu Variant Cp100 Siprotec 5 With Cpu Variant Cp300

Configuration 1 [-]

OR	cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp050::::::::
	cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp100::::::::
	cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp300::::::::

No data.

References

Link	Providers
https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf

History

No history.

MITRE

Status: PUBLISHED

Assigner: siemens

Published: 2021-09-14T10:47:35

Updated: 2024-08-03T23:58:22.916Z

Reserved: 2021-05-28T00:00:00

Link: CVE-2021-33719

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2021-09-14T11:15:24.447

Modified: 2021-12-16T18:25:13.870

Link: CVE-2021-33719

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "SIPROTEC 5 relays with CPU variants CP050", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V8.80"}]}, {"product": "SIPROTEC 5 relays with CPU variants CP100", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V8.80"}]}, {"product": "SIPROTEC 5 relays with CPU variants CP300", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V8.80"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-120", "description": "CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-10-12T09:49:21", "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "productcert@siemens.com", "ID": "CVE-2021-33719", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "SIPROTEC 5 relays with CPU variants CP050", "version": {"version_data": [{"version_value": "All versions < V8.80"}]}}, {"product_name": "SIPROTEC 5 relays with CPU variants CP100", "version": {"version_data": [{"version_value": "All versions < V8.80"}]}}, {"product_name": "SIPROTEC 5 relays with CPU variants CP300", "version": {"version_data": [{"version_value": "All versions < V8.80"}]}}]}, "vendor_name": "Siemens"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}]}, "references": {"reference_data": [{"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf", "refsource": "MISC", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T23:58:22.916Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"}]}]}, "cveMetadata": {"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "assignerShortName": "siemens", "cveId": "CVE-2021-33719", "datePublished": "2021-09-14T10:47:35", "dateReserved": "2021-05-28T00:00:00", "dateUpdated": "2024-08-03T23:58:22.916Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp050:*:*:*:*:*:*:*:*", "matchCriteriaId": "9755644C-32A9-468D-A7AD-D12B8C1924D9", "versionEndExcluding": "8.80", "vulnerable": true}, {"criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp100:*:*:*:*:*:*:*:*", "matchCriteriaId": "27B5603D-CA86-440D-9CBE-A6F50AA1ADE1", "versionEndExcluding": "8.80", "vulnerable": true}, {"criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp300:*:*:*:*:*:*:*:*", "matchCriteriaId": "23382FCC-10D8-4DEC-A6B1-9B39D8988299", "versionEndExcluding": "8.80", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en los rel\u00e9s SIPROTEC 5 con variantes de CPU CP050 (Todas las versiones anteriores a V8.80), rel\u00e9s SIPROTEC 5 con variantes de CPU CP100 (Todas las versiones anteriores a V8.80), rel\u00e9s SIPROTEC 5 con variantes de CPU CP300 (Todas las versiones anteriores a V8.80). Los paquetes especialmente dise\u00f1ados enviados al puerto 4443/tcp podr\u00edan causar una condici\u00f3n de denegaci\u00f3n de servicio o una potencial ejecuci\u00f3n de c\u00f3digo remota"}], "id": "CVE-2021-33719", "lastModified": "2021-12-16T18:25:13.870", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-09-14T11:15:24.447", "references": [{"source": "productcert@siemens.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"}], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "productcert@siemens.com", "type": "Primary"}]}