Vulnerability Intelligence Report
CVE-2021-41991
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.
No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:4.80%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| strongswan | strongswan | all |
| debian | debian_linux | 9.0, 10.0, 11.0 |
| fedoraproject | fedora | 33, 34, 35 |
| siemens | sinema_remote_connect_server | all |
| siemens | siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware | all |
| siemens | siplus_et_200sp_cp_1542sp-1_irc_tx_rail | all |
| siemens | simatic_cp_1243-1_firmware | all |
| siemens | simatic_cp_1243-1 | all |
| siemens | simatic_cp_1242-7_gprs_v2_firmware | all |
| siemens | simatic_cp_1242-7_gprs_v2 | all |
| siemens | simatic_net_cp_1243-8_irc_firmware | all |
| siemens | simatic_net_cp_1243-8_irc | all |
| siemens | scalance_sc632-2c_firmware | all |
| siemens | scalance_sc632-2c | all |
| siemens | siplus_et_200sp_cp_1543sp-1_isec_firmware | all |
| siemens | siplus_et_200sp_cp_1543sp-1_isec | all |
| siemens | cp_1543-1_firmware | all |
| siemens | cp_1543-1 | all |
| siemens | simatic_net_cp_1545-1_firmware | all |
| siemens | simatic_net_cp_1545-1 | all |
| siemens | simatic_cp_1543sp-1_firmware | all |
| siemens | simatic_cp_1543sp-1 | all |
| siemens | simatic_net_cp1243-7_lte_eu_firmware | all |
| siemens | simatic_net_cp1243-7_lte_eu | all |
| siemens | simatic_cp_1243-7_lte\/us_firmware | all |
| siemens | simatic_cp_1243-7_lte\/us | all |
| siemens | simatic_cp_1542sp-1_firmware | all |
| siemens | simatic_cp_1542sp-1 | all |
| siemens | scalance_sc636-2c_firmware | all |
| siemens | scalance_sc636-2c | all |
| siemens | simatic_cp_1542sp-1_irc_firmware | all |
| siemens | simatic_cp_1542sp-1_irc | all |
| siemens | scalance_sc642-2c_firmware | all |
| siemens | scalance_sc642-2c | all |
| siemens | scalance_sc646-2c_firmware | all |
| siemens | scalance_sc646-2c | all |
| siemens | scalance_sc622-2c_firmware | all |
| siemens | scalance_sc622-2c | all |
| siemens | siplus_s7-1200_cp_1243-1_rail_firmware | all |
| siemens | siplus_s7-1200_cp_1243-1_rail | all |
| siemens | siplus_s7-1200_cp_1243-1_firmware | all |
| siemens | siplus_s7-1200_cp_1243-1 | all |
| siemens | siplus_net_cp_1543-1_firmware | all |
| siemens | siplus_net_cp_1543-1 | all |
| siemens | siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware | all |
| siemens | siplus_et_200sp_cp_1543sp-1_isec_tx_rail | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
4.804%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2021-10-04T00:00:00 |
| Published | 2021-10-18T13:44:25 |
| Last Updated | 2024-08-04T03:22:25 |
Community Chatter & Buzz