CVE-2021-44693: siemens simatic drive controller cpu 1504d tf

Vulnerability summary

CVE-2021-44693 is a medium (CVSS 4.9) vulnerability in siemens simatic drive controller cpu 1504d tf. EPSS estimates a 0.77% chance of exploitation in the next 30 days, higher than 54.7% of scored vulnerabilities.

Timeline

1. 13-12-2022
   PublishedVulnerability first disclosed.
2. 21-04-2025
   Last modifiedVulnerability information updated.

Description

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

• CWE-1284Improper Validation of Specified Quantity in InputThe product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.