CVE-2021-44695: siemens simatic drive controller cpu 1504d tf

Vulnerability summary

CVE-2021-44695 is a medium (CVSS 4.9) vulnerability in siemens simatic drive controller cpu 1504d tf. EPSS estimates a 0.77% chance of exploitation in the next 30 days, higher than 54.7% of scored vulnerabilities.

Timeline

1. 13-12-2022
   PublishedVulnerability first disclosed.
2. 21-04-2025
   Last modifiedVulnerability information updated.

Description

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

• CWE-1286Improper Validation of Syntactic Correctness of InputThe product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.
• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.