Skip to content
NewA calmer, faster ZeroHour
Vulnerability5 · 1 read

CVE-2021-31886

CVSS 3.1
9.8 critical
EPSS
3%p87
Published
·
Modified
Analyze CVE-2021-31886 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and < V6.30.016), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus Source Code (All versions), TALON TC Compact (BACnet) (All versions < V3.5.4), TALON TC Modular (BACnet) (All versions < V3.5.4). FTP server does not properly validate the length of the “USER” command, leading to stack-based buffer overflows. This may result in Denial-of-Service conditions and Remote Code Execution. (FSMD-2021-0010)

Vendors
siemens
Products
nucleus net, nucleus readystart v3, nucleus source code, apogee modular building controller firmware, apogee modular equiment controller firmware, apogee pxc compact firmware, apogee pxc modular firmware, talon tc compact firmware, talon tc modular firmware, desigo pxc00-e.d firmware, desigo pxc00-u firmware, desigo pxc001-e.d firmware
Weakness
CWE-170, CWE-787
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news

6 stories