CVE-2021-31340

siemens simatic rf166c firmware, siemens simatic rf185c firmware, siemens simatic rf186c firmware +22 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-31340

Katalog CVE

CVSS 7.5 · High EPSS 0,99%

Kerentanan Uncontrolled Resource Consumption pada siemens simatic rf166c firmware, siemens simatic rf185c firmware +23 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability has been identified in SIMATIC RF166C (All versions > V1.1 and < V1.3.2), SIMATIC RF185C (All versions > V1.1 and < V1.3.2), SIMATIC RF186C (All versions > V1.1 and < V1.3.2), SIMATIC RF186CI (All versions > V1.1 and < V1.3.2), SIMATIC RF188C (All versions > V1.1 and < V1.3.2), SIMATIC RF188CI (All versions > V1.1 and < V1.3.2), SIMATIC RF360R (All versions < V2.0), SIMATIC Reader RF610R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF610R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF610R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF615R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF615R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF615R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF650R ARIB (All versions > V3.0 < V4.0), SIMATIC Reader RF650R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF650R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF650R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF680R ARIB (All versions > V3.0 < V4.0), SIMATIC Reader RF680R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF680R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF680R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF685R ARIB (All versions > V3.0 < V4.0), SIMATIC Reader RF685R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF685R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF685R FCC (All versions > V3.0 < V4.0). Affected devices do not properly handle large numbers of incoming connections. An attacker may leverage this to cause a Denial-of-Service situation.

Rincian

Terbit di NVD
8 Juni 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-400: Uncontrolled Resource Consumption
EPSS (30 hari)
0,99% peluang dieksploitasi; lebih tinggi dari 61,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
siemens simatic rf166c firmware Versi sesudah 1.1 hingga sebelum 1.3.2
siemens simatic rf185c firmware Versi sesudah 1.1 hingga sebelum 1.3.2
siemens simatic rf186c firmware Versi sesudah 1.1 hingga sebelum 1.3.2
siemens simatic rf186ci firmware Versi sesudah 1.1 hingga sebelum 1.3.2
siemens simatic rf188c firmware Versi sesudah 1.1 hingga sebelum 1.3.2
siemens simatic rf188ci firmware Versi sesudah 1.1 hingga sebelum 1.3.2
siemens simatic rf360r firmware Semua versi sebelum 2.0
siemens simatic reader rf610r cmiit firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf610r etsi firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf610r fcc firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf615r cmiit firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf615r etsi firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf615r fcc firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf650r cmiit firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf650r etsi firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf650r fcc firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf650r arib firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf680r cmiit firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf680r etsi firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf680r fcc firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf680r arib firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf685r cmiit firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf685r etsi firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf685r fcc firmware Versi 3.0 hingga sebelum 4.0
siemens simatic reader rf685r arib firmware Versi 3.0 hingga sebelum 4.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.