Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-22816


A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334E, 337E, 350E and 357E RTUs with firmware V8.18.1 and prior


Published

2022-01-28T20:15:10.303

Last Modified

2024-11-21T05:50:43.777

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-754

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System schneider-electric scadapack_312e_firmware < 8.19.1 Yes
Hardware schneider-electric scadapack_312e - No
Operating System schneider-electric scadapack_313e_firmware < 8.19.1 Yes
Hardware schneider-electric scadapack_313e - No
Operating System schneider-electric scadapack_314e_firmware < 8.19.1 Yes
Hardware schneider-electric scadapack_314e - No
Operating System schneider-electric scadapack_330e_firmware < 8.19.1 Yes
Hardware schneider-electric scadapack_330e - No
Operating System schneider-electric scadapack_333e_firmware < 8.19.1 Yes
Hardware schneider-electric scadapack_333e - No
Operating System schneider-electric scadapack_334e_firmware < 8.19.1 Yes
Hardware schneider-electric scadapack_334e - No
Operating System schneider-electric scadapack_337e_firmware < 8.19.1 Yes
Hardware schneider-electric scadapack_337e - No
Operating System schneider-electric scadapack_350e_firmware < 8.19.1 Yes
Hardware schneider-electric scadapack_350e - No
Operating System schneider-electric scadapack_357e_firmware < 8.19.1 Yes
Hardware schneider-electric scadapack_357e - No

References