CVE-2021-29998: Siemens Ruggedcom Win Subscriber Station Firmware

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.

Affected products

• Siemens Ruggedcom Win Subscriber Station Firmware: any version
• Siemens Scalance x200-4 P Irt Firmware: any version
• Siemens Scalance x201-3p Irt Firmware: any version
• Siemens Scalance x201-3p Irt Pro Firmware: any version
• Siemens Scalance x202-2 Irt Firmware: any version
• Siemens Scalance x202-2p Irt Firmware: any version
• Siemens Scalance x202-2p Irt Pro Firmware: any version
• Siemens Scalance x204-2 Firmware: any version
• Siemens Scalance x204-2fm Firmware: any version
• Siemens Scalance x204-2ld Firmware: any version
• Siemens Scalance x204-2ld Ts Firmware: any version
• Siemens Scalance x204-2ts Firmware: any version
• Siemens Scalance x204 Irt Firmware: any version
• Siemens Scalance x204 Irt Pro Firmware: any version
• Siemens Scalance x206-1 Firmware: any version
• Siemens Scalance x206-1ld Firmware: any version
• Siemens Scalance x208 Firmware: any version
• Siemens Scalance x208 Pro Firmware: any version
• Siemens Scalance x212-2 Firmware: any version
• Siemens Scalance x212-2ld Firmware: any version
• Siemens Scalance x216 Firmware: any version
• Siemens Scalance x224 Firmware: any version
• Siemens Scalance x300 Firmware: any version
• Siemens Scalance x408 Firmware: any version
• Siemens Scalance XF201-3p Irt Firmware: any version
• and 11 more

Published 2021-04-13. Last modified 2026-06-17.