description: A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.6), SCALANCE X-300 switch family (incl. SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X408 (All versions < V4.1.3), SCALANCE X414 (All versions), SIMATIC RF182C (All versions). Unprivileged remote attackers located in the same local network segment (OSI Layer 2) could gain remote code execution on the affected products by sending a specially crafted DHCP response to a client's DHCP request.
problem types: CWE-122: Heap-based Buffer Overflow
affected:
{
product: RFID 181EIP
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: RUGGEDCOM Win
vendor: Siemens
versions:
status: affected, version: V4.4, V4.5, V5.0, and V5.1
}
{
product: SCALANCE X-200 switch family (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V5.2.3
}
{
product: SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V5.4.1
}
{
product: SCALANCE X-200RNA switch family
vendor: Siemens
versions:
status: affected, version: All versions < V3.2.6
}
{
product: SCALANCE X-300 switch family (incl. SIPLUS NET variants)
vendor: Siemens
versions:
status: affected, version: All versions < V4.1.3
}
{
product: SCALANCE X408
vendor: Siemens
versions:
status: affected, version: All versions < V4.1.3
}
{
product: SCALANCE X414
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SIMATIC RF182C
vendor: Siemens
versions:
status: affected, version: All versions
}
