CVE-2021-25676 | BDVDB-2026-150475 Detail

SiemensRUGGEDCOM RM1224

Description#

A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-307 Improper Restriction of Excessive Authentication Attempts

References#

https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdf
https://us-cert.cisa.gov/ics/advisories/icsa-21-068-02

Exploit#

No public exploit known

History#

Version 12021-03-15Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.