CVE-2021-44695

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1286CWE-20

Affected software

VendorProductVersions
SiemensSIMATIC Drive Controller CPU 1504D TFAll versions < V2.9.7
SiemensSIMATIC Drive Controller CPU 1507D TFAll versions < V2.9.7
SiemensSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)All versions < V21.9.7
SiemensSIMATIC S7-1200 CPU family (incl. SIPLUS variants)All versions < V4.6.0
SiemensSIMATIC S7-1500 CPU 1510SP F-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1510SP-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1511-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1511-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1511C-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1511C-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1511F-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1511F-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1511T-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1511TF-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1512C-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1512C-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1512SP F-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1512SP-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1513-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1513-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1513F-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1513F-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1513R-1 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1515-2 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1515-2 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1515F-2 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1515F-2 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1515R-2 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1515T-2 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1515TF-2 PNAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1516-3 PN/DPAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1516-3 PN/DPAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1516F-3 PN/DPAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1516F-3 PN/DPAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU 1516T-3 PN/DPAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1516TF-3 PN/DPAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1517-3 PN/DPAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1517F-3 PN/DPAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1517H-3 PNAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1517T-3 PN/DPAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1517TF-3 PN/DPAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DPAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFPAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DPAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFPAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1518HF-4 PNAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1518T-4 PN/DPAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU 1518TF-4 PN/DPAll versions < V3.0.1
SiemensSIMATIC S7-1500 CPU S7-1518-4 PN/DP ODKAll versions < V2.9.7
SiemensSIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODKAll versions < V2.9.7

References

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-446965.5Adobe Prelude version 22.1.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memCVE-2021-446973.3Adobe Audition versions 14.4 (and earlier), and 22.0 (and earlier)are affected by an out-of-bounds read vulnerability that could lead to disCVE-2021-446983.3Adobe Audition versions 14.4 (and earlier), and 22.0 (and earlier)are affected by an out-of-bounds read vulnerability that could lead to disCVE-2021-446993.3Adobe Audition versions 14.4 (and earlier), and 22.0 (and earlier)are affected by an out-of-bounds read vulnerability that could lead to disCVE-2021-44709.3TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is pCVE-2021-447005.5Adobe Illustrator versions 25.4.2 (and earlier) and 26.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could leadCVE-2021-447017.8Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-CVE-2021-447024.3Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affecteCVE-2021-447037.8Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a stack buffCVE-2021-447047.8Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-CVE-2021-447057.8Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-CVE-2021-447067.8Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-
CVE-2021-44695: Medium severity, CVSS 4.9 | Vulnix