CVE-2021-31345

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions). The total length of an UDP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on a user-defined applications that runs on top of the UDP protocol. (FSMD-2021-0006)

• CWE-1284

• https://cert-portal.siemens.com/productcert/html/ssa-044112.html
• https://cert-portal.siemens.com/productcert/html/ssa-114589.html
• https://cert-portal.siemens.com/productcert/html/ssa-620288.html
• https://cert-portal.siemens.com/productcert/html/ssa-845392.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf

Published

Nov 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3134Mubu 2.2.1 allows local users to gain privileges to execute …7.8
• CVE-2021-31340A vulnerability has been identified in SIMATIC RF166C (All v…7.5
• CVE-2021-31341Uploading a table mapping using a manipulated XML file resul…4.3
• CVE-2021-31342The ugeom2d.dll library in all versions of Solid Edge SE2020…8.8
• CVE-2021-31343The jutil.dll library in all versions of Solid Edge SE2020 b…8.8
• CVE-2021-31344A vulnerability has been identified in Capital Embedded AR C…5.3
• CVE-2021-31346A vulnerability has been identified in Capital Embedded AR C…9.1
• CVE-2021-31347An issue was discovered in libezxml.a in ezXML 0.8.6. The fu…6.5
• CVE-2021-31348An issue was discovered in libezxml.a in ezXML 0.8.6. The fu…6.5
• CVE-2021-31349The usage of an internal HTTP header created an authenticati…9.8
• CVE-2021-3135An issue was discovered in the tagDiv Newspaper theme 10.3.9…6.1
• CVE-2021-31350An Improper Privilege Management vulnerability in the gRPC f…8.8