CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-29998
Critical (9.8). EPSS 2.4% chance of exploitation in the next 30 days.
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.
Severity
- EPSS
- 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- siemens:ruggedcom_win_subscriber_station_firmware
- siemens:scalance_x200-4_p_irt_firmware
- siemens:scalance_x201-3p_irt_firmware
- siemens:scalance_x201-3p_irt_pro_firmware
- siemens:scalance_x202-2_irt_firmware
- siemens:scalance_x202-2p_irt_firmware
- siemens:scalance_x202-2p_irt_pro_firmware
- siemens:scalance_x204-2_firmware
- siemens:scalance_x204-2fm_firmware
- siemens:scalance_x204-2ld_firmware
- siemens:scalance_x204-2ld_ts_firmware
- siemens:scalance_x204-2ts_firmware
- siemens:scalance_x204_irt_firmware
- siemens:scalance_x204_irt_pro_firmware
- siemens:scalance_x206-1_firmware
- siemens:scalance_x206-1ld_firmware
- siemens:scalance_x208_firmware
- siemens:scalance_x208_pro_firmware
- siemens:scalance_x212-2_firmware
- siemens:scalance_x212-2ld_firmware
- siemens:scalance_x216_firmware
- siemens:scalance_x224_firmware
- siemens:scalance_x300_firmware
- siemens:scalance_x408_firmware
- siemens:scalance_xf201-3p_irt_firmware
- siemens:scalance_xf202-2p_irt_firmware
- siemens:scalance_xf204-2_firmware
- siemens:scalance_xf204-2ba_irt_firmware
- siemens:scalance_xf204_firmware
- siemens:scalance_xf204_irt_firmware
- siemens:scalance_xf206-1_firmware
- siemens:scalance_xf208_firmware
- siemens:simatic_rf_181_eip_firmware
- siemens:simatic_rf_182c_firmware
- siemens:sinamics_perfect_harmony_gh180_firmware
- windriver:vxworks
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf
- https://support2.windriver.com/index.php?page=security-notices
- https://us-cert.cisa.gov/ics/advisories/icsa-21-194-12
- https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf