Capital Embedded Ar Classic 431 422
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:capital_embedded_ar_classic_431-422:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Capital Embedded Ar Classic 431 422 (e09bb793-242e-5aa5-9b36-797f5c1e173d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-89208 |
vulnerable | 2026-11-03 10:17:50.723084 |
Details available
MEDIUM (5.3)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3), Desigo PXC001-E.D (All versions >= V2.3), Desigo PXC100-E.D (All versions >= V2.3), Desigo PXC12-E.D (All versions >= V2.3), Desigo PXC128-U (All versions >= V2.3), Desigo PXC200-E.D (All versions >= V2.3), Desigo PXC22-E.D (All versions >= V2.3), Desigo PXC22.1-E.D (All versions >= V2.3), Desigo PXC36.1-E.D (All versions >= V2.3), Desigo PXC50-E.D (All versions >= V2.3), Desigo PXC64-U (All versions >= V2.3), Desigo PXM20-E (All versions >= V2.3). The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.
Published: 2026-10-13T09:19:12.086Z
Updated: 2026-10-13T16:20:06.901Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31890 |
vulnerable | 2026-06-08 05:31:54.138636 |
Details available
HIGH (7.5)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an TCP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0017)
Published: 2021-11-09T11:32:02.000Z
Updated: 2025-03-11T09:47:46.741Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31889 |
vulnerable | 2026-06-08 05:31:54.137690 |
Details available
HIGH (7.5)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0). Malformed TCP packets with a corrupted SACK option leads to Information Leaks and Denial-of-Service conditions. (FSMD-2021-0015)
Published: 2021-11-09T11:32:01.000Z
Updated: 2025-03-11T09:47:45.226Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31883 |
vulnerable | 2026-06-08 05:31:54.075597 |
Details available
HIGH (7.1)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP ACK message, the DHCP client application does not validate the length of the Vendor option(s), leading to Denial-of-Service conditions. (FSMD-2021-0013)
Published: 2021-11-09T11:31:56.000Z
Updated: 2025-03-11T09:47:43.750Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31882 |
vulnerable | 2026-06-08 05:31:54.074686 |
Details available
MEDIUM (6.5)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). The DHCP client application does not validate the length of the Domain Name Server IP option(s) (0x06) when processing DHCP ACK packets. This may lead to Denial-of-Service conditions. (FSMD-2021-0011)
Published: 2021-11-09T11:31:55.000Z
Updated: 2025-03-11T09:47:42.320Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31881 |
vulnerable | 2026-06-08 05:31:54.073773 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31346 |
vulnerable | 2026-06-08 05:31:52.437875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31345 |
vulnerable | 2026-06-08 05:31:52.436994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31344 |
vulnerable | 2026-06-08 05:31:52.421576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25664 |
vulnerable | 2026-06-08 05:30:41.325101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25663 |
vulnerable | 2026-06-08 05:30:41.318002 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13939 |
vulnerable | 2026-06-08 05:12:52.542897 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.