CVE-2021-37182

A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5), SCALANCE XM416-4C (All versions < V6.5), SCALANCE XM416-4C (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 1x230V (All versions < V6.5), SCALANCE XR524-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 24V (All versions < V6.5), SCALANCE XR524-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 2x230V (All versions < V6.5), SCALANCE XR524-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 1x230V (All versions < V6.5), SCALANCE XR526-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 24V (All versions < V6.5), SCALANCE XR526-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 2x230V (All versions < V6.5), SCALANCE XR526-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR528-6M (All versions < V6.5), SCALANCE XR528-6M (2HR2) (All versions < V6.5), SCALANCE XR528-6M (2HR2, L3 int.) (All versions < V6.5), SCALANCE XR528-6M (L3 int.) (All versions < V6.5), SCALANCE XR552-12M (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2, L3 int.) (All versions < V6.5). The OSPF protocol implementation in affected devices fails to verify the checksum and length fields in the OSPF LS Update messages. An unauthenticated remote attacker could exploit this vulnerability to cause interruptions in the network by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.

• CWE-354
• CWE-354

• https://cert-portal.siemens.com/productcert/pdf/ssa-145224.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-145224.pdfPatch, Vendor Advisory

Published

Jun 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37177A vulnerability has been identified in SINEMA Remote Connect…6.5
• CVE-2021-37178A vulnerability has been identified in Solid Edge SE2021 (Al…5.5
• CVE-2021-37179A vulnerability has been identified in Solid Edge SE2021 (Al…7.8
• CVE-2021-3718A denial of service vulnerability was reported in some Think…4.6
• CVE-2021-37180A vulnerability has been identified in Solid Edge SE2021 (Al…7.8
• CVE-2021-37181A vulnerability has been identified in Cerberus DMS V4.0 (Al…10
• CVE-2021-37183A vulnerability has been identified in SINEMA Remote Connect…6.5
• CVE-2021-37184A vulnerability has been identified in Industrial Edge Manag…9.8
• CVE-2021-37185A vulnerability has been identified in SIMATIC Drive Control…7.5
• CVE-2021-37186A vulnerability has been identified in LOGO! CMR2020 (All ve…5.4
• CVE-2021-37187An issue was discovered on Digi TransPort devices through 20…6.5
• CVE-2021-37188An issue was discovered on Digi TransPort devices through 20…8.8