CVE-2021-25676
Quick assessment
Affected
Siemens RUGGEDCOM RM1224
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Siemens RUGGEDCOM是德国西门子（Siemens）公司的一个通信设备。为电力，交通，石油和天然气及其他行业提供快速可靠的通信。 Siemens RUGGEDCOM 存在安全漏洞，该漏洞源于SSH失败身份验证来触发致命错误，以触发拒绝服务。
Possible ATT&CK Techniques 1 AI
T1499.002 · Service Exhaustion Flood
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-25676
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
过多认证尝试的限制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Siemens RUGGEDCOM 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens RUGGEDCOM是德国西门子（Siemens）公司的一个通信设备。为电力，交通，石油和天然气及其他行业提供快速可靠的通信。 Siemens RUGGEDCOM 存在安全漏洞，该漏洞源于SSH失败身份验证来触发致命错误，以触发拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Siemens | RUGGEDCOM RM1224 | V6.3 | - |
|
| Siemens | SCALANCE M-800 | V6.3 | - |
|
| Siemens | SCALANCE S615 | V6.3 | - |
|
| Siemens | SCALANCE SC-600 | All Versions >= V2.1 and < V2.1.3 | - |
|
II. Public POCs for CVE-2021-25676
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-25676
请登录查看更多情报信息。
Vendor Advisories for CVE-2021-25676 (2)
-
https://us-cert.cisa.gov/ics/advisories/icsa-21-068-02 x_refsource_CONFIRM
-
https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdf x_refsource_MISC
Same Patch Batch · Siemens · 2021-03-15 · 14 CVEs total
| CVE-2020-25236 | 5.5 MEDIUM | Siemens LOGO! 8 BM 安全漏洞 |
| CVE-2021-25667 | Siemens RUGGEDCOM RM1224 缓冲区错误漏洞 | |
| CVE-2021-25672 | 西门子 Mendix 安全漏洞 | |
| CVE-2021-25673 | Siemens SIMATIC 安全漏洞 | |
| CVE-2021-25674 | Siemens SIMATIC 代码问题漏洞 | |
| CVE-2021-25675 | Siemens SIMATIC 数字错误漏洞 | |
| CVE-2021-27380 | Siemens Solid Edge 缓冲区错误漏洞 | |
| CVE-2021-27381 | Siemens Solid Edge 缓冲区错误漏洞 | |
| CVE-2020-25239 | Siemens SINEMA Remote Connect Server 安全漏洞 | |
| CVE-2020-25240 | Siemens SINEMA Remote Connect Server 安全漏洞 | |
| CVE-2020-25241 | Siemens SIMATIC MV400 安全漏洞 | |
| CVE-2020-28385 | Siemens Solid Edge 缓冲区错误漏洞 | |
| CVE-2020-28387 | Siemens Solid Edge 代码问题漏洞 |
IV. Related Vulnerabilities
Same vendor: Siemens
Same weakness: CWE-307
-
CVE-2026-76213
phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Thr -
CVE-2026-73529
Plainpad Missing Rate Limiting via POST /v1/sessions -
CVE-2026-75773
karakeep-app karakeep Login Endpoint auth.ts authorize exces -
CVE-2026-74868
SiYuan before 3.7.4 Brute-Force Authentication via Publish S -
CVE-2026-73056
SiYuan kernel before 3.7.4 Unthrottled Brute-Force via API T
V. Comments for CVE-2021-25676
No comments yet