CVE-2021-44694: siemens simatic drive controller cpu 1504d tf

Vulnerability summary

CVE-2021-44694 is a medium (CVSS 5.5) vulnerability in siemens simatic drive controller cpu 1504d tf. EPSS estimates a 0.66% chance of exploitation in the next 30 days, higher than 50.4% of scored vulnerabilities.

Timeline

1. 13-12-2022
   PublishedVulnerability first disclosed.
2. 21-04-2025
   Last modifiedVulnerability information updated.

Description

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

• CWE-1287Improper Validation of Specified Type of InputThe product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.