Back
CVE-2021-31345
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All…
High7.5EPSS 1.6%
- Published
- Updated
- Reserved
- Assigned by
- siemens
Description
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions). The total length of an UDP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on a user-defined applications that runs on top of the UDP protocol. (FSMD-2021-0006)
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| siemensCNA (assigner) | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVDNVD · Modified | 3.1 | Critical9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
- EPSS (exploitation in 30 days)
- 1.6% · top 24% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Weakness
Affected products
Siemens · Capital Embedded AR Classic 431-422
- affected < *
Siemens · Capital Embedded AR Classic R20-11
- affected < V2303
- affected All versions
References (8)
- https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf (opens in a new tab)x_refsource_MISCx_transferred
- https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf (opens in a new tab)x_refsource_MISCx_transferred
- https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf (opens in a new tab)x_refsource_MISCx_transferred
- https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf (opens in a new tab)x_refsource_MISCx_transferred
- https://cert-portal.siemens.com/productcert/html/ssa-114589.html (opens in a new tab)
- https://cert-portal.siemens.com/productcert/html/ssa-044112.html (opens in a new tab)
- https://cert-portal.siemens.com/productcert/html/ssa-620288.html (opens in a new tab)
- https://cert-portal.siemens.com/productcert/html/ssa-845392.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2021-31345)Record last updated .