Read the docs
TI-2021-11490 Aliases CVE-2021-31346GHSA-gwc7-j4mc-q8fw

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All…

Priority MEDIUM 43CWE-1284Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an ICMP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0007)

Why it matters now

EPSS 0.01965 80th percentileScored 2026-11-07
Fix Fixed Capital Embedded AR Classic R20-11 (Siemens): V2303SIMOTICS CONNECT 400 (Siemens): V0.5.0.0, V1.0.0.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensCapital Embedded AR Classic 431-422all versions—No fix listedCNA
SiemensCapital Embedded AR Classic R20-11before V2303V2303Patch availableCNA
SiemensPLUSCONTROL 1st GenAll versions—No fix listedCNA
SiemensSIMOTICS CONNECT 400before V0.5.0.0V0.5.0.0Patch availableCNA
SiemensSIMOTICS CONNECT 400before V1.0.0.0V1.0.0.0Patch availableCNA
  • Capital Embedded AR Classic 431-422 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • Capital Embedded AR Classic R20-11 VendorSiemens Affected before V2303 Fixed in V2303 Patch available CNA
  • PLUSCONTROL 1st Gen VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMOTICS CONNECT 400 VendorSiemens Affected before V0.5.0.0 Fixed in V0.5.0.0 Patch available CNA
  • SIMOTICS CONNECT 400 VendorSiemens Affected before V1.0.0.0 Fixed in V1.0.0.0 Patch available CNA

CPE configurations NVD · 17

CPEVersionsRoleVendor
cpe:2.3:a:siemens:capital_vstar:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:*before 2017.02.1VulnerableSiemens
cpe:2.3:a:siemens:nucleus_readystart_v4:*:*:*:*:*:*:*:*before 4.1.1VulnerableSiemens
cpe:2.3:a:siemens:nucleus_source_code:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:o:siemens:apogee_modular_building_controller_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:h:siemens:apogee_modular_building_controller:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:apogee_modular_equiment_controller_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:h:siemens:apogee_modular_equiment_controller:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:apogee_pxc_compact_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
  • cpe:2.3:a:siemens:capital_vstar:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:* Versions before 2017.02.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:nucleus_readystart_v4:*:*:*:*:*:*:*:* Versions before 4.1.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:nucleus_source_code:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:o:siemens:apogee_modular_building_controller_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:h:siemens:apogee_modular_building_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:apogee_modular_equiment_controller_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:h:siemens:apogee_modular_equiment_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:apogee_pxc_compact_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
Show 7 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:siemens:apogee_pxc_compact:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:apogee_pxc_modular_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:h:siemens:apogee_pxc_modular:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:talon_tc_compact_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:h:siemens:talon_tc_compact:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:talon_tc_modular_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:h:siemens:talon_tc_modular:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:h:siemens:apogee_pxc_compact:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:apogee_pxc_modular_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:h:siemens:apogee_pxc_modular:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:talon_tc_compact_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:h:siemens:talon_tc_compact:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:talon_tc_modular_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:h:siemens:talon_tc_modular:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

  • Fix · CNA Capital Embedded AR Classic R20-11 (Siemens) Fixed in V2303
  • Fix · CNA SIMOTICS CONNECT 400 (Siemens) Fixed in V0.5.0.0
  • Fix · CNA SIMOTICS CONNECT 400 (Siemens) Fixed in V1.0.0.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Siemens Capital Embedded AR Classic R20-11 V2303

    8 records Highest priority Priority MEDIUM 4 MEDIUM, 4 LOW

    Other records, highest priority first

    • TI-2021-11879 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All…Priority MEDIUM 44
    • TI-2021-11878 Integer underflow in Siemens Capital Embedded AR Classic 431-422Priority MEDIUM 43
    • TI-2021-11489 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All…Priority MEDIUM 43
    Show all 8 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-31346
  2. 2026-10-03 Alias added: GHSA-gwc7-j4mc-q8fw

References

Advisory 2

Other 8

  • TI-2021-11875 Out-of-bounds write in Siemens APOGEE MBC CVSS 3.1CRITICAL 9.8
  • TI-2022-17998 Uncontrolled resource consumption in Siemens APOGEE MBC CVSS 4.0HIGH 8.7
  • TI-2021-11873 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE… CVSS 3.1CRITICAL 9.8
  • TI-2021-11879 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All… CVSS 3.1CRITICAL 9.1
  • TI-2021-11878 Integer underflow in Siemens Capital Embedded AR Classic 431-422 CVSS 3.1CRITICAL 9.1
  • TI-2021-11877 Out-of-bounds write in Siemens APOGEE MBC CVSS 3.1HIGH 8.8
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences