CVE-2021-25676

HIGH

Siemens RUGGEDCOM RM1224, SCALANCE M-800, S615, SC-600 - Denial of Service via SSH Authentication Attempts

Title source: llm

Description

A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdf

Third Party Advisory, US Government Resource x_refsource_confirm

https://us-cert.cisa.gov/ics/advisories/icsa-21-068-02

Scores

CVSS v3 7.5

EPSS 0.0033

EPSS Percentile 56.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-307

Status published

Products (4)

siemens/ruggedcom_rm1224_firmware 6.3

siemens/scalance_m-800_firmware 6.3

siemens/scalance_s615_firmware 6.3

siemens/scalance_sc-600_firmware 2.1 - 2.1.3

Published Mar 15, 2021

Tracked Since Feb 18, 2026