Riskcovery

CVE-2021-25664

State
Published
Severity
8.7 High
Published
Apr 22, 2021
Updated
Mar 11, 2025
Reserved
Jan 21, 2021

Read the record on cve.org

Description

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes the Hop-by-Hop extension header in IPv6 packets and its options lacks any checks against the length field of the header, allowing attackers to put the function into an infinite loop by supplying arbitrary length values.

Scores

CVSSScoreVectorSource
4.08.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:Nsiemens
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csiemens

Weaknesses

  • CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

Affected Products

ProductVersions
Capital Embedded AR Classic 431-422Siemens
  • all versionsAffected
Capital Embedded AR Classic R20-11Siemens
  • before V2303Affected
Nucleus NETSiemens
  • All versionsAffected
Nucleus ReadyStart V3Siemens
  • before V2017.02.4Affected
Nucleus ReadyStart V4Siemens
  • before V4.1.0Affected
Nucleus Source CodeSiemens
  • all versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.