{"id":"CVE-2021-25667","aliases":["EUVD-2021-12559","GHSA-p672-97f8-chmq"],"status":"published","title":"A vulnerability has been identified in RUGGEDCOM RM1224 (All versions \u003e= V4.3), SCALANCE M-800 ...","description":"A vulnerability has been identified in RUGGEDCOM RM1224 (All versions \u003e= V4.3 and \u003c V6.4), SCALANCE M-800 (All versions \u003e= V4.3 and \u003c V6.4), SCALANCE S615 (All versions \u003e= V4.3 and \u003c V6.4), SCALANCE SC-600 Family (All versions \u003e= V2.0 and \u003c V2.1.3), SCALANCE XB-200 (All versions \u003c V4.1), SCALANCE XC-200 (All versions \u003c V4.1), SCALANCE XF-200BA (All versions \u003c V4.1), SCALANCE XM400 (All versions \u003c V6.2), SCALANCE XP-200 (All versions \u003c V4.1), SCALANCE XR-300WG (All versions \u003c V4.1), SCALANCE XR500 (All versions \u003c V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00945,"percentile":0.61514,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121","CWE-787"],"published":"2021-03-15T17:03:31Z","modified":"2026-06-17T03:42:19Z","products":[{"vendor":"siemens","product":"ruggedcom rm1224"},{"vendor":"siemens","product":"ruggedcom_rm1224_firmware"},{"vendor":"siemens","product":"scalance m-800"},{"vendor":"siemens","product":"scalance s615"},{"vendor":"siemens","product":"scalance sc-600 family"},{"vendor":"siemens","product":"scalance xb-200"},{"vendor":"siemens","product":"scalance xc-200"},{"vendor":"siemens","product":"scalance xf-200ba"},{"vendor":"siemens","product":"scalance xm400"},{"vendor":"siemens","product":"scalance xp-200"},{"vendor":"siemens","product":"scalance xr-300wg"},{"vendor":"siemens","product":"scalance xr500"},{"vendor":"siemens","product":"scalance_m-800_firmware"},{"vendor":"siemens","product":"scalance_s615_firmware"},{"vendor":"siemens","product":"scalance_sc622-2c_firmware"},{"vendor":"siemens","product":"scalance_sc632-2c_firmware"},{"vendor":"siemens","product":"scalance_sc636-2c_firmware"},{"vendor":"siemens","product":"scalance_sc642-2c_firmware"},{"vendor":"siemens","product":"scalance_sc646-2c_firmware"},{"vendor":"siemens","product":"scalance_x300wg_firmware"},{"vendor":"siemens","product":"scalance_xb-200_firmware"},{"vendor":"siemens","product":"scalance_xc-200_firmware"},{"vendor":"siemens","product":"scalance_xf-200ba_firmware"},{"vendor":"siemens","product":"scalance_xm400_firmware"},{"vendor":"siemens","product":"scalance_xp-200_firmware"},{"vendor":"siemens","product":"scalance_xr500_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-979775.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-068-03","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25667"},{"url":"https://github.com/advisories/GHSA-p672-97f8-chmq"}],"sources":{"cve":[{"id":"CVE-2021-25667","description":"A vulnerability has been identified in RUGGEDCOM RM1224 (All versions \u003e= V4.3 and \u003c V6.4), SCALANCE M-800 (All versions \u003e= V4.3 and \u003c V6.4), SCALANCE S615 (All versions \u003e= V4.3 and \u003c V6.4), SCALANCE SC-600 Family (All versions \u003e= V2.0 and \u003c V2.1.3), SCALANCE XB-200 (All versions \u003c V4.1), SCALANCE XC-200 (All versions \u003c V4.1), SCALANCE XF-200BA (All versions \u003c V4.1), SCALANCE XM400 (All versions \u003c V6.2), SCALANCE XP-200 (All versions \u003c V4.1), SCALANCE XR-300WG (All versions \u003c V4.1), SCALANCE XR500 (All versions \u003c V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.","status":"published","published":"2021-03-15T17:03:31Z","modified":"2026-06-02T19:24:47.966Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:32:59.802172Z"}],"euvd":[{"id":"EUVD-2021-12559","description":"A vulnerability has been identified in RUGGEDCOM RM1224 (All versions \u003e= V4.3 and \u003c V6.4), SCALANCE M-800 (All versions \u003e= V4.3 and \u003c V6.4), SCALANCE S615 (All versions \u003e= V4.3 and \u003c V6.4), SCALANCE SC-600 Family (All versions \u003e= V2.0 and \u003c V2.1.3), SCALANCE XB-200 (All versions \u003c V4.1), SCALANCE XC-200 (All versions \u003c V4.1), SCALANCE XF-200BA (All versions \u003c V4.1), SCALANCE XM400 (All versions \u003c V6.2), SCALANCE XP-200 (All versions \u003c V4.1), SCALANCE XR-300WG (All versions \u003c V4.1), SCALANCE XR500 (All versions \u003c V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.","status":"published","published":"2021-03-15T17:03:31Z","modified":"2026-06-02T19:24:47Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T18:20:55.231104Z"}],"ghsa":[{"id":"GHSA-p672-97f8-chmq","title":"A vulnerability has been identified in RUGGEDCOM RM1224 (All versions \u003e= V4.3), SCALANCE M-800 ...","description":"A vulnerability has been identified in RUGGEDCOM RM1224 (All versions \u003e= V4.3), SCALANCE M-800 (All versions \u003e= V4.3), SCALANCE S615 (All versions \u003e= V4.3), SCALANCE SC-600 Family (All versions \u003e= V2.0 and \u003c V2.1.3), SCALANCE X300WG (All versions \u003c V4.1), SCALANCE XM400 (All versions \u003c V6.2), SCALANCE XR500 (All versions \u003c V6.2), SCALANCE Xx200 Family (All versions \u003c V4.1). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.","status":"published","published":"2022-05-24T17:44:33Z","modified":"2023-02-01T05:08:25Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:50:45.608979Z"}],"nvd":[{"id":"CVE-2021-25667","description":"A vulnerability has been identified in RUGGEDCOM RM1224 (All versions \u003e= V4.3 and \u003c V6.4), SCALANCE M-800 (All versions \u003e= V4.3 and \u003c V6.4), SCALANCE S615 (All versions \u003e= V4.3 and \u003c V6.4), SCALANCE SC-600 Family (All versions \u003e= V2.0 and \u003c V2.1.3), SCALANCE XB-200 (All versions \u003c V4.1), SCALANCE XC-200 (All versions \u003c V4.1), SCALANCE XF-200BA (All versions \u003c V4.1), SCALANCE XM400 (All versions \u003c V6.2), SCALANCE XP-200 (All versions \u003c V4.1), SCALANCE XR-300WG (All versions \u003c V4.1), SCALANCE XR500 (All versions \u003c V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.","status":"published","published":"2021-03-15T17:15:21.69Z","modified":"2026-06-17T03:42:19.19Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":5.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:06:50.805771Z"}]}}