{"schemaVersion":3,"id":"CVE-2021-41991","aliases":["ALPINE-CVE-2021-41991","SUSE-SU-2021:14827-1","SUSE-SU-2021:3468-1","UBUNTU-CVE-2021-41991","USN-5111-2","DEBIAN-CVE-2021-41991","DLA-2788-1"],"status":"published","duplicateOf":null,"title":null,"description":"The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.","dates":{"published":"2021-10-18T13:44:25.000Z","modified":"2024-08-04T03:22:25.655Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.05301,"percentile":0.92501,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.09699999999999986,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.05204},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05301,"percentile":0.92501}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05204,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05301,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05301,"percentile":0.92501}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"alpine","product":"strongswan","name":"strongswan","label":"strongswan","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/strongswan","purlType":"apk","versions":[{"text":"≥ 4.2.10, < 5.8.4-r3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.2.10, < 5.9.1-r1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.2.10, < 5.9.1-r2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.2.10, < 5.9.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.2.10, < 5.8.4-r3 | ≥ 4.2.10, < 5.9.1-r1 | ≥ 4.2.10, < 5.9.1-r2 | ≥ 4.2.10, < 5.9.1-r3","eol":null,"hubHref":null},{"vendor":"debian","product":"strongswan","name":"strongswan","label":"strongswan","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/strongswan","purlType":"deb","versions":[{"text":"< 5.9.4-1","noFixRecorded":false,"fixedIn":null},{"text":"< 5.5.1-4+deb9u5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.9.4-1 | < 5.5.1-4+deb9u5","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"strongswan","name":"strongswan","label":"strongswan","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/strongswan","purlType":"deb","versions":[{"text":"< 5.1.2-0ubuntu2.11+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 5.3.5-1ubuntu3.8+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 5.3.5-1ubuntu3.fips.3.8.2","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 5.6.2-1ubuntu2.7","noFixRecorded":false,"fixedIn":null},{"text":"< 5.6.2-1ubuntu2.fips.2.7.1","noFixRecorded":false,"fixedIn":null},{"text":"< 5.8.2-1ubuntu3.3","noFixRecorded":false,"fixedIn":null},{"text":"< 5.8.2-1ubuntu3.fips.3.3.1","noFixRecorded":false,"fixedIn":null},{"text":"< 5.9.1-1ubuntu3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.2-0ubuntu2.11+esm1 | < 5.3.5-1ubuntu3.8+esm1 | < 5.3.5-1ubuntu3.fips.3.8.2 | All versions (No fix recorded) | < 5.6.2-1ubuntu2.7 | < 5.6.2-1ubuntu2.fips.2.7.1 | < 5.8.2-1ubuntu3.3 | < 5.8.2-1ubuntu3.fips.3.3.1 | < 5.9.1-1ubuntu3.1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"9.0","noFixRecorded":false,"fixedIn":null},{"text":"10.0","noFixRecorded":false,"fixedIn":null},{"text":"11.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.0 | 10.0 | 11.0","eol":{"isEol":true,"eolDate":"2022-07-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"9","label":"9 (Stretch)","eolFrom":"2022-07-01T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"9.13"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"33","noFixRecorded":false,"fixedIn":null},{"text":"34","noFixRecorded":false,"fixedIn":null},{"text":"35","noFixRecorded":false,"fixedIn":null}],"versionsText":"33 | 34 | 35","eol":{"isEol":true,"eolDate":"2021-11-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"33","label":"33","eolFrom":"2021-11-30T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"suse","product":"strongswan&distro=HPE Helion OpenStack 8","name":"strongswan","label":"strongswan&distro=HPE Helion OpenStack 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=HPE Helion OpenStack 8","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE Linux Enterprise Point of Sale 11 SP3","name":"strongswan","label":"strongswan&distro=SUSE Linux Enterprise Point of Sale 11 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE Linux Enterprise Point of Sale 11 SP3","purlType":"rpm","versions":[{"text":"< 4.4.0-6.36.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-6.36.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","name":"strongswan","label":"strongswan&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 4.4.0-6.36.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-6.36.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE Linux Enterprise Server 12 SP2-BCL","name":"strongswan","label":"strongswan&distro=SUSE Linux Enterprise Server 12 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE Linux Enterprise Server 12 SP2-BCL","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE Linux Enterprise Server 12 SP3-BCL","name":"strongswan","label":"strongswan&distro=SUSE Linux Enterprise Server 12 SP3-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE Linux Enterprise Server 12 SP3-BCL","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","name":"strongswan","label":"strongswan&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","name":"strongswan","label":"strongswan&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE Linux Enterprise Server 12 SP5","name":"strongswan","label":"strongswan&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"strongswan","label":"strongswan&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"strongswan","label":"strongswan&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"strongswan","label":"strongswan&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE OpenStack Cloud 8","name":"strongswan","label":"strongswan&distro=SUSE OpenStack Cloud 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE OpenStack Cloud 8","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE OpenStack Cloud 9","name":"strongswan","label":"strongswan&distro=SUSE OpenStack Cloud 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE OpenStack Cloud 9","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE OpenStack Cloud Crowbar 8","name":"strongswan","label":"strongswan&distro=SUSE OpenStack Cloud Crowbar 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE OpenStack Cloud Crowbar 8","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"strongswan&distro=SUSE OpenStack Cloud Crowbar 9","name":"strongswan","label":"strongswan&distro=SUSE OpenStack Cloud Crowbar 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/strongswan&distro=SUSE OpenStack Cloud Crowbar 9","purlType":"rpm","versions":[{"text":"< 5.1.3-26.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.3-26.16.1","eol":null,"hubHref":null},{"vendor":"siemens","product":"cp_1543-1_firmware","name":"cp 1543-1 firmware","label":"cp_1543-1_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/cp_1543-1"},{"vendor":"siemens","product":"scalance_sc622-2c_firmware","name":"scalance sc622-2c firmware","label":"scalance_sc622-2c_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/scalance_sc622-2c"},{"vendor":"siemens","product":"scalance_sc632-2c_firmware","name":"scalance sc632-2c firmware","label":"scalance_sc632-2c_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/scalance_sc632-2c"},{"vendor":"siemens","product":"scalance_sc636-2c_firmware","name":"scalance sc636-2c firmware","label":"scalance_sc636-2c_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/scalance_sc636-2c"},{"vendor":"siemens","product":"scalance_sc642-2c_firmware","name":"scalance sc642-2c firmware","label":"scalance_sc642-2c_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/scalance_sc642-2c"},{"vendor":"siemens","product":"scalance_sc646-2c_firmware","name":"scalance sc646-2c firmware","label":"scalance_sc646-2c_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 2.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3","eol":null,"hubHref":"/vendor/siemens/scalance_sc646-2c"},{"vendor":"siemens","product":"simatic_cp_1242-7_gprs_v2_firmware","name":"simatic cp 1242-7 gprs v2 firmware","label":"simatic_cp_1242-7_gprs_v2_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/simatic_cp_1242-7_gprs_v2"},{"vendor":"siemens","product":"simatic_cp_1243-1_firmware","name":"simatic cp 1243-1 firmware","label":"simatic_cp_1243-1_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/simatic_cp_1243-1"},{"vendor":"siemens","product":"simatic_cp_1243-7_lte\\/us_firmware","name":"simatic cp 1243-7 lte\\/us firmware","label":"simatic_cp_1243-7_lte\\/us_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/simatic_cp_1243-7_lteus"},{"vendor":"siemens","product":"simatic_cp_1542sp-1_firmware","name":"simatic cp 1542sp-1 firmware","label":"simatic_cp_1542sp-1_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/simatic_cp_1542sp-1"},{"vendor":"siemens","product":"simatic_cp_1542sp-1_irc_firmware","name":"simatic cp 1542sp-1 irc firmware","label":"simatic_cp_1542sp-1_irc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/simatic_cp_1542sp-1_irc"},{"vendor":"siemens","product":"simatic_cp_1543sp-1_firmware","name":"simatic cp 1543sp-1 firmware","label":"simatic_cp_1543sp-1_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/simatic_cp_1543sp-1"},{"vendor":"siemens","product":"simatic_net_cp_1243-8_irc_firmware","name":"simatic net cp 1243-8 irc firmware","label":"simatic_net_cp_1243-8_irc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/simatic_net_cp_1243-8_irc"},{"vendor":"siemens","product":"simatic_net_cp_1545-1_firmware","name":"simatic net cp 1545-1 firmware","label":"simatic_net_cp_1545-1_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/simatic_net_cp_1545-1"},{"vendor":"siemens","product":"simatic_net_cp1243-7_lte_eu_firmware","name":"simatic net cp1243-7 lte eu firmware","label":"simatic_net_cp1243-7_lte_eu_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/simatic_net_cp1243-7_lte_eu"},{"vendor":"siemens","product":"sinema_remote_connect_server","name":"sinema remote connect server","label":"sinema_remote_connect_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/sinema_remote_connect_server"},{"vendor":"siemens","product":"siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware","name":"siplus et 200sp cp 1542sp-1 irc tx rail firmware","label":"siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/siplus_et_200sp_cp_1542sp-1_irc_tx_rail"},{"vendor":"siemens","product":"siplus_et_200sp_cp_1543sp-1_isec_firmware","name":"siplus et 200sp cp 1543sp-1 isec firmware","label":"siplus_et_200sp_cp_1543sp-1_isec_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/siplus_et_200sp_cp_1543sp-1_isec"},{"vendor":"siemens","product":"siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware","name":"siplus et 200sp cp 1543sp-1 isec tx rail firmware","label":"siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/siplus_et_200sp_cp_1543sp-1_isec_tx_rail"},{"vendor":"siemens","product":"siplus_net_cp_1543-1_firmware","name":"siplus net cp 1543-1 firmware","label":"siplus_net_cp_1543-1_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/siplus_net_cp_1543-1"},{"vendor":"siemens","product":"siplus_s7-1200_cp_1243-1_firmware","name":"siplus s7-1200 cp 1243-1 firmware","label":"siplus_s7-1200_cp_1243-1_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/siplus_s7-1200_cp_1243-1"},{"vendor":"siemens","product":"siplus_s7-1200_cp_1243-1_rail_firmware","name":"siplus s7-1200 cp 1243-1 rail firmware","label":"siplus_s7-1200_cp_1243-1_rail_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/siplus_s7-1200_cp_1243-1_rail"},{"vendor":"strongswan","product":"strongswan","name":"strongswan","label":"strongswan","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.2.10, < 5.9.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.2.10, < 5.9.4","eol":null,"hubHref":"/vendor/strongswan/strongswan"}],"affectedCount":43,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://github.com/strongswan/strongswan/releases/tag/5.9.4","label":"github.com/strongswan/strongswan/releases/tag/5.9.4","hostname":"github.com","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-%28cve-2021-41991%29.html","label":"www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-%28cve-2021-41991%29.html","hostname":"www.strongswan.org","tags":["X Refsource CONFIRM"]},{"url":"https://www.debian.org/security/2021/dsa-4989","label":"www.debian.org/security/2021/dsa-4989","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00014.html","label":"lists.debian.org/debian-lts-announce/2021/10/msg00014.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf","label":"cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf","hostname":"cert-portal.siemens.com","tags":["X Refsource CONFIRM","Patch","Third Party Advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-41991","label":"security.alpinelinux.org/vuln/CVE-2021-41991","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114827-1/","label":"www.suse.com/support/update/announcement/2021/suse-su-202114827-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1191435","label":"bugzilla.suse.com/1191435","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41991","label":"www.suse.com/security/cve/CVE-2021-41991","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213468-1/","label":"www.suse.com/support/update/announcement/2021/suse-su-20213468-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-41991","label":"ubuntu.com/security/CVE-2021-41991","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-5111-1","label":"ubuntu.com/security/notices/USN-5111-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5111-2","label":"ubuntu.com/security/notices/USN-5111-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41991","label":"www.cve.org/CVERecord?id=CVE-2021-41991","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-41991","label":"security-tracker.debian.org/tracker/CVE-2021-41991","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41991","label":"nvd.nist.gov/vuln/detail/CVE-2021-41991","hostname":"nvd.nist.gov","tags":["Oval","Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-4989-1","OPENSUSE-SU-2021:1399-1","OPENSUSE-SU-2021:3467-1","OPENSUSE-SU-2024:11655-1","SUSE-SU-2021:3467-1","SUSE-SU-2021:3469-1","USN-5111-1"],"duplicates":[],"related":["OPENSUSE-SU-2021:1399-1","OPENSUSE-SU-2021:3467-1","OPENSUSE-SU-2024:11655-1","SUSE-SU-2021:3467-1","SUSE-SU-2021:3469-1","USN-5111-1"]},"timeline":[{"kind":"published","date":"2021-10-18T13:44:25.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T03:22:25.655Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:30:19.138Z","stale":false,"partial":false}}