Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:capital_embedded_ar_classic_r20-11:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductCapital Embedded Ar Classic R20 11 (f9200848-09b4-5849-96ca-3dc308dd16d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-31890 vulnerable 2026-06-08 05:31:54.138671 Details available
HIGH (7.5)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an TCP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0017)
Published: 2021-11-09T11:32:02.000Z
Updated: 2025-03-11T09:47:46.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31889 vulnerable 2026-06-08 05:31:54.137732 Details available
HIGH (7.5)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0). Malformed TCP packets with a corrupted SACK option leads to Information Leaks and Denial-of-Service conditions. (FSMD-2021-0015)
Published: 2021-11-09T11:32:01.000Z
Updated: 2025-03-11T09:47:45.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31883 vulnerable 2026-06-08 05:31:54.075628 Details available
HIGH (7.1)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP ACK message, the DHCP client application does not validate the length of the Vendor option(s), leading to Denial-of-Service conditions. (FSMD-2021-0013)
Published: 2021-11-09T11:31:56.000Z
Updated: 2025-03-11T09:47:43.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31882 vulnerable 2026-06-08 05:31:54.074718 Details available
MEDIUM (6.5)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). The DHCP client application does not validate the length of the Domain Name Server IP option(s) (0x06) when processing DHCP ACK packets. This may lead to Denial-of-Service conditions. (FSMD-2021-0011)
Published: 2021-11-09T11:31:55.000Z
Updated: 2025-03-11T09:47:42.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31881 vulnerable 2026-06-08 05:31:54.073907 Details available
HIGH (7.1)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP OFFER message, the DHCP client application does not validate the length of the Vendor option(s), leading to Denial-of-Service conditions. (FSMD-2021-0008)
Published: 2021-11-09T11:31:54.000Z
Updated: 2025-03-11T09:47:40.916Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31346 vulnerable 2026-06-08 05:31:52.437914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31345 vulnerable 2026-06-08 05:31:52.437034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31344 vulnerable 2026-06-08 05:31:52.422396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25664 vulnerable 2026-06-08 05:30:41.325145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25663 vulnerable 2026-06-08 05:30:41.318884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13939 vulnerable 2026-06-08 05:12:52.543614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.