Riskcovery

CVE-2021-31895

State
Published
Severity
8.1 High
Published
Jul 13, 2021
Updated
Oct 14, 2025
Reserved
Apr 29, 2021

Read the record on cve.org

Description

A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.7), RUGGEDCOM i801 (All versions < V4.3.7), RUGGEDCOM i802 (All versions < V4.3.7), RUGGEDCOM i803 (All versions < V4.3.7), RUGGEDCOM M2100 (All versions < V4.3.7), RUGGEDCOM M2200 (All versions < V4.3.7), RUGGEDCOM M969 (All versions < V4.3.7), RUGGEDCOM RMC30 (All versions < V4.3.7), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.7), RUGGEDCOM RMC8388 V5.X (All versions < V5.5.4), RUGGEDCOM RP110 (All versions < V4.3.7), RUGGEDCOM RS1600 (All versions < V4.3.7), RUGGEDCOM RS1600F (All versions < V4.3.7), RUGGEDCOM RS1600T (All versions < V4.3.7), RUGGEDCOM RS400 (All versions < V4.3.7), RUGGEDCOM RS401 (All versions < V4.3.7), RUGGEDCOM RS416 (All versions < V4.3.7), RUGGEDCOM RS416P (All versions < V4.3.7), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.7), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.5.4), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.7), RUGGEDCOM RS416v2 V5.X (All versions < 5.5.4), RUGGEDCOM RS8000 (All versions < V4.3.7), RUGGEDCOM RS8000A (All versions < V4.3.7), RUGGEDCOM RS8000H (All versions < V4.3.7), RUGGEDCOM RS8000T (All versions < V4.3.7), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RS900G (All versions < V4.3.7), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RS900GP (All versions < V4.3.7), RUGGEDCOM RS900L (All versions < V4.3.7), RUGGEDCOM RS900W (All versions < V4.3.7), RUGGEDCOM RS910 (All versions < V4.3.7), RUGGEDCOM RS910L (All versions < V4.3.7), RUGGEDCOM RS910W (All versions < V4.3.7), RUGGEDCOM RS920L (All versions < V4.3.7), RUGGEDCOM RS920W (All versions < V4.3.7), RUGGEDCOM RS930L (All versions < V4.3.7), RUGGEDCOM RS930W (All versions < V4.3.7), RUGGEDCOM RS940G (All versions < V4.3.7), RUGGEDCOM RS969 (All versions < V4.3.7), RUGGEDCOM RSG2100 (All versions < V4.3.7), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RSG2100P (All versions < V4.3.7), RUGGEDCOM RSG2100P (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RSG2200 (All versions < V4.3.7), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2288 V5.X (All versions < V5.5.4), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2300 V5.X (All versions < V5.5.4), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.7), RUGGEDCOM RSG2300P V5.X (All versions < V5.5.4), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2488 V5.X (All versions < V5.5.4), RUGGEDCOM RSG907R (All versions < V5.5.4), RUGGEDCOM RSG908C (All versions < V5.5.4), RUGGEDCOM RSG909R (All versions < V5.5.4), RUGGEDCOM RSG910C (All versions < V5.5.4), RUGGEDCOM RSG920P V4.X (All versions < V4.3.7), RUGGEDCOM RSG920P V5.X (All versions < V5.5.4), RUGGEDCOM RSL910 (All versions < V5.5.4), RUGGEDCOM RST2228 (All versions < V5.5.4), RUGGEDCOM RST2228P (All versions < V5.5.4), RUGGEDCOM RST916C (All versions < V5.5.4), RUGGEDCOM RST916P (All versions < V5.5.4). The DHCP client in affected devices fails to properly sanitize incoming DHCP packets. This could allow an unauthenticated remote attacker to cause memory to be overwritten, potentially allowing remote code execution.

Scores

CVSSScoreVectorSource
3.18.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:Csiemens

Weaknesses

  • CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

ProductVersions
RUGGEDCOM i800Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM i801Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM i802Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM i803Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM M2100Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM M2200Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM M969Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM RMC30Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM RMC8388 V4.XSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RMC8388 V5.XSiemens
  • before V5.5.4Affected
RUGGEDCOM RP110Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS1600Siemens
  • before V4.3.7Affected
RUGGEDCOM RS1600FSiemens
  • before V4.3.7Affected
RUGGEDCOM RS1600TSiemens
  • before V4.3.7Affected
RUGGEDCOM RS400Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS401Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS416Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS416PSiemens
  • before V4.3.7Affected
RUGGEDCOM RS416Pv2 V4.XSiemens
  • before V4.3.7Affected
RUGGEDCOM RS416Pv2 V5.XSiemens
  • before V5.5.4Affected
RUGGEDCOM RS416v2 V4.XSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS416v2 V5.XSiemens
  • All versions < 5.5.4Affected
RUGGEDCOM RS8000Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS8000ASiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS8000HSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS8000TSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS900 (32M) V4.XSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS900 (32M) V5.XSiemens
  • All versions < V5.5.4Affected
RUGGEDCOM RS900GSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS900G (32M) V4.XSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS900G (32M) V5.XSiemens
  • All versions < V5.5.4Affected
RUGGEDCOM RS900GPSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS900LSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS900WSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS910Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS910LSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS910WSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS920LSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS920WSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS930LSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS930WSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS940GSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RS969Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM RSG2100Siemens
  • before V4.3.7Affected
RUGGEDCOM RSG2100 (32M) V4.XSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RSG2100 (32M) V5.XSiemens
  • All versions < V5.5.4Affected
RUGGEDCOM RSG2100PSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RSG2100P (32M) V4.XSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RSG2100P (32M) V5.XSiemens
  • All versions < V5.5.4Affected
RUGGEDCOM RSG2200Siemens
  • All versions < V4.3.7Affected
RUGGEDCOM RSG2288 V4.XSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RSG2288 V5.XSiemens
  • All versions < V5.5.4Affected
RUGGEDCOM RSG2300 V4.XSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RSG2300 V5.XSiemens
  • All versions < V5.5.4Affected
RUGGEDCOM RSG2300P V4.XSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RSG2300P V5.XSiemens
  • All versions < V5.5.4Affected
RUGGEDCOM RSG2488 V4.XSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RSG2488 V5.XSiemens
  • All versions < V5.5.4Affected
RUGGEDCOM RSG907RSiemens
  • before V5.5.4Affected
RUGGEDCOM RSG908CSiemens
  • before V5.5.4Affected
RUGGEDCOM RSG909RSiemens
  • before V5.5.4Affected
RUGGEDCOM RSG910CSiemens
  • before V5.5.4Affected
RUGGEDCOM RSG920P V4.XSiemens
  • All versions < V4.3.7Affected
RUGGEDCOM RSG920P V5.XSiemens
  • All versions < V5.5.4Affected
RUGGEDCOM RSL910Siemens
  • All versions < V5.5.4Affected
RUGGEDCOM RST2228Siemens
  • All versions < V5.5.4Affected
RUGGEDCOM RST2228PSiemens
  • before V5.5.4Affected
RUGGEDCOM RST916CSiemens
  • All versions < V5.5.4Affected
RUGGEDCOM RST916PSiemens
  • All versions < V5.5.4Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.