CVE-2021-42020

Description

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200NC, RUGGEDCOM M969, RUGGEDCOM M969NC, RUGGEDCOM RMC30, RUGGEDCOM RMC30NC, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RMC8388NC V4.X, RUGGEDCOM RMC8388NC V5.X, RUGGEDCOM RP110, RUGGEDCOM RP110NC, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600FNC, RUGGEDCOM RS1600NC, RUGGEDCOM RS1600T, RUGGEDCOM RS1600TNC, RUGGEDCOM RS400, RUGGEDCOM RS400NC, RUGGEDCOM RS401, RUGGEDCOM RS401NC, RUGGEDCOM RS416, RUGGEDCOM RS416NC, RUGGEDCOM RS416NCv2 V4.X, RUGGEDCOM RS416NCv2 V5.X, RUGGEDCOM RS416P, RUGGEDCOM RS416PNC, RUGGEDCOM RS416PNCv2 V4.X, RUGGEDCOM RS416PNCv2 V5.X, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000ANC, RUGGEDCOM RS8000H, RUGGEDCOM RS8000HNC, RUGGEDCOM RS8000NC, RUGGEDCOM RS8000T, RUGGEDCOM RS8000TNC, RUGGEDCOM RS900, RUGGEDCOM RS900 (32M) V4.X, RUGGEDCOM RS900 (32M) V5.X, RUGGEDCOM RS900G, RUGGEDCOM RS900G (32M) V4.X, RUGGEDCOM RS900G (32M) V5.X, RUGGEDCOM RS900GNC, RUGGEDCOM RS900GNC(32M) V4.X, RUGGEDCOM RS900GNC(32M) V5.X, RUGGEDCOM RS900GP, RUGGEDCOM RS900GPNC, RUGGEDCOM RS900L, RUGGEDCOM RS900LNC, RUGGEDCOM RS900M-GETS-C01, RUGGEDCOM RS900M-GETS-XX, RUGGEDCOM RS900M-STND-C01, RUGGEDCOM RS900M-STND-XX, RUGGEDCOM RS900MNC-GETS-C01, RUGGEDCOM RS900MNC-GETS-XX, RUGGEDCOM RS900MNC-STND-XX, RUGGEDCOM RS900MNC-STND-XX-C01, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC(32M) V4.X, RUGGEDCOM RS900NC(32M) V5.X, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910LNC, RUGGEDCOM RS910NC, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920LNC, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930LNC, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS940GNC, RUGGEDCOM RS969, RUGGEDCOM RS969NC, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100NC, RUGGEDCOM RSG2100NC(32M) V4.X, RUGGEDCOM RSG2100NC(32M) V5.X, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2100PNC, RUGGEDCOM RSG2100PNC (32M) V4.X, RUGGEDCOM RSG2100PNC (32M) V5.X, RUGGEDCOM RSG2200, RUGGEDCOM RSG2200NC, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2288NC V4.X, RUGGEDCOM RSG2288NC V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300NC V4.X, RUGGEDCOM RSG2300NC V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PNC V4.X, RUGGEDCOM RSG2300PNC V5.X, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG2488NC V4.X, RUGGEDCOM RSG2488NC V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSG920PNC V4.X, RUGGEDCOM RSG920PNC V5.X, RUGGEDCOM RSL910, RUGGEDCOM RSL910NC, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P. The third-party component, in its TFTP functionality fails to check for null terminations in file names. If an attacker were to exploit this, it could result in data corruption, and possibly a hard-fault of the application.

CVSS breakdown

Affected products

• Siemens / RUGGEDCOM i8000 – V4.3.8
• Siemens / RUGGEDCOM i800NC0 – V4.3.8
• Siemens / RUGGEDCOM i8010 – V4.3.8
• Siemens / RUGGEDCOM i801NC0 – V4.3.8
• Siemens / RUGGEDCOM i8020 – V4.3.8
• Siemens / RUGGEDCOM i802NC0 – V4.3.8
• Siemens / RUGGEDCOM i8030 – V4.3.8
• Siemens / RUGGEDCOM i803NC0 – V4.3.8
• Siemens / RUGGEDCOM M21000 – V4.3.8
• Siemens / RUGGEDCOM M2100NC0 – V4.3.8
• Siemens / RUGGEDCOM M22000 – V4.3.8
• Siemens / RUGGEDCOM M2200NC0 – V4.3.8
• Siemens / RUGGEDCOM M9690 – V4.3.8
• Siemens / RUGGEDCOM M969NC0 – V4.3.8
• Siemens / RUGGEDCOM RMC300 – V4.3.8
• Siemens / RUGGEDCOM RMC30NC0 – V4.3.8
• Siemens / RUGGEDCOM RMC8388NC V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RMC8388NC V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RMC8388 V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RMC8388 V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RP1100 – V4.3.8
• Siemens / RUGGEDCOM RP110NC0 – V4.3.8
• Siemens / RUGGEDCOM RS16000 – V4.3.8
• Siemens / RUGGEDCOM RS1600F0 – V4.3.8
• Siemens / RUGGEDCOM RS1600FNC0 – V4.3.8
• Siemens / RUGGEDCOM RS1600NC0 – V4.3.8
• Siemens / RUGGEDCOM RS1600T0 – V4.3.8
• Siemens / RUGGEDCOM RS1600TNC0 – V4.3.8
• Siemens / RUGGEDCOM RS4000 – V4.3.8
• Siemens / RUGGEDCOM RS400NC0 – V4.3.8
• Siemens / RUGGEDCOM RS4010 – V4.3.8
• Siemens / RUGGEDCOM RS401NC0 – V4.3.8
• Siemens / RUGGEDCOM RS4160 – V4.3.8
• Siemens / RUGGEDCOM RS416NC0 – V4.3.8
• Siemens / RUGGEDCOM RS416NCv2 V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RS416NCv2 V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RS416P0 – V4.3.8
• Siemens / RUGGEDCOM RS416PNC0 – V4.3.8
• Siemens / RUGGEDCOM RS416PNCv2 V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RS416PNCv2 V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RS416Pv2 V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RS416Pv2 V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RS416v2 V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RS416v2 V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RS80000 – V4.3.8
• Siemens / RUGGEDCOM RS8000A0 – V4.3.8
• Siemens / RUGGEDCOM RS8000ANC0 – V4.3.8
• Siemens / RUGGEDCOM RS8000H0 – V4.3.8
• Siemens / RUGGEDCOM RS8000HNC0 – V4.3.8
• Siemens / RUGGEDCOM RS8000NC0 – V4.3.8
• Siemens / RUGGEDCOM RS8000T0 – V4.3.8
• Siemens / RUGGEDCOM RS8000TNC0 – V4.3.8
• Siemens / RUGGEDCOM RS9000 – V4.3.8
• Siemens / RUGGEDCOM RS900 (32M) V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RS900 (32M) V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RS900G0 – V4.3.8
• Siemens / RUGGEDCOM RS900G (32M) V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RS900G (32M) V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RS900GNC0 – V4.3.8
• Siemens / RUGGEDCOM RS900GNC(32M) V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RS900GNC(32M) V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RS900GP0 – V4.3.8
• Siemens / RUGGEDCOM RS900GPNC0 – V4.3.8
• Siemens / RUGGEDCOM RS900L0 – V4.3.8
• Siemens / RUGGEDCOM RS900LNC0 – V4.3.8
• Siemens / RUGGEDCOM RS900M-GETS-C010 – V4.3.8
• Siemens / RUGGEDCOM RS900M-GETS-XX0 – V4.3.8
• Siemens / RUGGEDCOM RS900MNC-GETS-C010 – V4.3.8
• Siemens / RUGGEDCOM RS900MNC-GETS-XX0 – V4.3.8
• Siemens / RUGGEDCOM RS900MNC-STND-XX0 – V4.3.8
• Siemens / RUGGEDCOM RS900MNC-STND-XX-C010 – V4.3.8
• Siemens / RUGGEDCOM RS900M-STND-C010 – V4.3.8
• Siemens / RUGGEDCOM RS900M-STND-XX0 – V4.3.8
• Siemens / RUGGEDCOM RS900NC0 – V4.3.8
• Siemens / RUGGEDCOM RS900NC(32M) V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RS900NC(32M) V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RS900W0 – V4.3.8
• Siemens / RUGGEDCOM RS9100 – V4.3.8
• Siemens / RUGGEDCOM RS910L0 – V4.3.8
• Siemens / RUGGEDCOM RS910LNC0 – V4.3.8
• Siemens / RUGGEDCOM RS910NC0 – V4.3.8
• Siemens / RUGGEDCOM RS910W0 – V4.3.8
• Siemens / RUGGEDCOM RS920L0 – V4.3.8
• Siemens / RUGGEDCOM RS920LNC0 – V4.3.8
• Siemens / RUGGEDCOM RS920W0 – V4.3.8
• Siemens / RUGGEDCOM RS930L0 – V4.3.8
• Siemens / RUGGEDCOM RS930LNC0 – V4.3.8
• Siemens / RUGGEDCOM RS930W0 – V4.3.8
• Siemens / RUGGEDCOM RS940G0 – V4.3.8
• Siemens / RUGGEDCOM RS940GNC0 – V4.3.8
• Siemens / RUGGEDCOM RS9690 – V4.3.8
• Siemens / RUGGEDCOM RS969NC0 – V4.3.8
• Siemens / RUGGEDCOM RSG21000 – V4.3.8
• Siemens / RUGGEDCOM RSG2100 (32M) V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG2100 (32M) V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG2100NC0 – V4.3.8
• Siemens / RUGGEDCOM RSG2100NC(32M) V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG2100NC(32M) V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG2100P0 – V4.3.8
• Siemens / RUGGEDCOM RSG2100P (32M) V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG2100P (32M) V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG2100PNC0 – V4.3.8
• Siemens / RUGGEDCOM RSG2100PNC (32M) V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG2100PNC (32M) V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG22000 – V4.3.8
• Siemens / RUGGEDCOM RSG2200NC0 – V4.3.8
• Siemens / RUGGEDCOM RSG2288NC V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG2288NC V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG2288 V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG2288 V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG2300NC V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG2300NC V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG2300PNC V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG2300PNC V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG2300P V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG2300P V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG2300 V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG2300 V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG2488NC V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG2488NC V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG2488 V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG2488 V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG907R0 – V5.6.0
• Siemens / RUGGEDCOM RSG908C0 – V5.6.0
• Siemens / RUGGEDCOM RSG909R0 – V5.6.0
• Siemens / RUGGEDCOM RSG910C0 – V5.6.0
• Siemens / RUGGEDCOM RSG920PNC V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG920PNC V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSG920P V4.X0 – V4.3.8
• Siemens / RUGGEDCOM RSG920P V5.X0 – V5.6.0
• Siemens / RUGGEDCOM RSL9100 – V5.6.0
• Siemens / RUGGEDCOM RSL910NC0 – V5.6.0
• Siemens / RUGGEDCOM RST22280 – V5.6.0
• Siemens / RUGGEDCOM RST2228P0 – V5.6.0
• Siemens / RUGGEDCOM RST916C0 – V5.6.0
• Siemens / RUGGEDCOM RST916P0 – V5.6.0

References

• MISChttps://cert-portal.siemens.com/productcert/pdf/ssa-256353.pdf
• MISChttps://cert-portal.siemens.com/productcert/html/ssa-256353.html