CVE-2021-3712 in the critical feed json
Read buffer overruns processing ASN.1 strings
published 2021-08-24 5 y ago modified 2026-07-25 3 mo ago also EUVD-2022-4935 , GHSA-q9wj-f4qw-6vfj , JLSEC-2026-225 , RUSTSEC-2021-0098
- cvss
- 7.4
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 48.1%
- EPSS 48.1% chance of exploitation in 30 days, percentile 98%
- public exploits
- 0
- none known
Summary
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the "data" and "length" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the "data" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).
Patch / fix
- crates.io openssl-src 111.16.0
- julia OpenSSL_jll 1.1.13+0
- julia Openresty_jll 1.19.9+0
- Siemens BFCClient V2.17
- Siemens RUGGEDCOM ROX MX5000 V2.15.0
- Siemens RUGGEDCOM ROX MX5000RE V2.15.0
- Siemens RUGGEDCOM ROX RX1400 V2.15.0
- Siemens RUGGEDCOM ROX RX1500 V2.15.0
- Siemens RUGGEDCOM ROX RX1501 V2.15.0
- Siemens RUGGEDCOM ROX RX1510 V2.15.0
- Siemens RUGGEDCOM ROX RX1511 V2.15.0
- Siemens RUGGEDCOM ROX RX1512 V2.15.0
- Siemens RUGGEDCOM ROX RX1524 V2.15.0
- Siemens RUGGEDCOM ROX RX1536 V2.15.0
- Siemens RUGGEDCOM ROX RX5000 V2.15.0
- Siemens SCALANCE MUM853-1 (EU) V7.1
- Siemens SCALANCE MUM856-1 (EU) V7.1
- Siemens SCALANCE MUM856-1 (RoW) V7.1
- Siemens SCALANCE W1748-1 M12 V3.0.0
- Siemens SCALANCE W1788-1 M12 V3.0.0
- Siemens SCALANCE W1788-2 EEC M12 V3.0.0
- Siemens SCALANCE W1788-2 M12 V3.0.0
- Siemens SCALANCE W1788-2IA M12 V3.0.0
- Siemens SCALANCE W721-1 RJ45 V6.6.0
- Siemens SCALANCE W722-1 RJ45 V6.6.0
- Siemens SCALANCE W734-1 RJ45 V6.6.0
- Siemens SCALANCE W734-1 RJ45 (USA) V6.6.0
- Siemens SCALANCE W738-1 M12 V6.6.0
- Siemens SCALANCE W748-1 M12 V6.6.0
- Siemens SCALANCE W748-1 RJ45 V6.6.0
- openssl Debian 14, Debian 13, Debian 12 1.1.1l-1
debian advisories DEBIAN-CVE-2021-3712
- edk2 Ubuntu 20.04 LTS 0~20191122.bd85bf54-2ubuntu3.3
- edk2 Ubuntu 22.04 LTS 2022.02-3ubuntu0.22.04.4
- openssl Ubuntu 18.04 LTS 1.1.1-1ubuntu2.1~18.04.13
- openssl Ubuntu 20.04 LTS 1.1.1f-1ubuntu2.8
- openssl Ubuntu 22.04 LTS 1.1.1l-1ubuntu1
- openssl1.0 Ubuntu 18.04 LTS 1.0.2n-1ubuntu5.7
- openssl Ubuntu Pro 14.04 LTS 1.0.1f-1ubuntu2.27+esm4
- openssl Ubuntu Pro 16.04 LTS 1.0.2g-1ubuntu4.20+esm1
ubuntu advisories UBUNTU-CVE-2021-3712
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- openssl RHEL 8 1:1.1.1k-5.el8_5
- openssl-libs RHEL 8 1:1.1.1k-5.el8_5
- openssl-perl RHEL 8 1:1.1.1k-5.el8_5
- jws5-tomcat jboss enterprise web server 5.6 9.0.50-3.redhat_00004.1.el7jws
- jws5-tomcat jboss enterprise web server 5.6 9.0.50-3.redhat_00004.1.el8jws
- jws5-tomcat-lib jboss enterprise web server 5.6 9.0.50-3.redhat_00004.1.el7jws
- jws5-tomcat-lib jboss enterprise web server 5.6 9.0.50-3.redhat_00004.1.el8jws
- jws5-tomcat-vault jboss enterprise web server 5.6 1.1.8-4.Final_redhat_00004.1.el7jws
red hat advisories RHSA-2021:5226RHSA-2021:4861RHSA-2021:4614RHSA-2022:0064
- openssl-1_1 SLE Module for Basesystem 15 SP3, SLE Module for Basesystem 15 SP2, SLE Micro 5.1 +1 more 1.1.1d-11.30.1
- openssl SLES for SAP 12 SP3, SLES 12 SP3-LTSS, SLES 12 SP3-BCL +4 more 1.0.2j-60.72.2
- openssl SLES 11 SP4-LTSS, SLE Point of Sale 11 SP3 0.9.8j-0.106.43.1
- openssl1 SLES 11-SECURITY 1.0.1g-0.58.39.1
- compat-openssl098 SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES for SAP 12 SP3 +1 more 0.9.8j-106.30.2
- openssl-1_1 SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES 12 SP5 +4 more 1.1.1d-2.39.2
- openssl-1_0_0 SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES 12 SP5 +4 more 1.0.2p-3.42.2
- openssl-1_0_0 SLES for SAP 15 SP1, SLES for SAP 15, SLES 15-LTSS +5 more 1.0.2p-3.43.1
suse advisories SUSE-SU-2021:2966-2SUSE-SU-2021:3144-1SUSE-SU-2021:14802-1SUSE-SU-2021:14801-1SUSE-SU-2021:3019-1SUSE-SU-2021:2996-1
- openssl-1_0_0 openSUSE Tumbleweed 1.0.2u-6.2
- openssl-1_1 openSUSE Tumbleweed 1.1.1l-1.2
- nmap openSUSE Tumbleweed 7.93-1.1
- openssl-1_0_0 openSUSE Leap 15.2 1.0.2p-lp152.8.18.1
- openssl-1_1 openSUSE Leap 15.2 1.1.1d-lp152.7.24.1
- openssl-1_0_0 openSUSE Leap 15.3 1.0.2p-3.43.1
- openssl-1_1 openSUSE Leap 15.3 1.1.1d-11.30.1
- openssl-1_0_0 openSUSE Leap 15.2 1.0.2p-lp152.8.15.1
opensuse advisories openSUSE-SU-2024:11126-1openSUSE-SU-2024:11127-1openSUSE-SU-2024:12303-1openSUSE-SU-2021:1261-1openSUSE-SU-2021:1248-1openSUSE-SU-2021:2994-1
- openssl Rocky Linux 8 1:1.1.1k-5.el8_5
rocky linux advisories RLSA-2021:5226
- openssl Alpine 3.24, Alpine 3.23, Alpine 3.22 +11 more 1.1.1l-r0
- openssl3 Alpine 3.16, Alpine 3.15 1.1.1l-r0
- openssl1.1-compat Alpine 3.18, Alpine 3.17 1.1.1l-r0
alpine advisories ALPINE-CVE-2021-3712
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2021-3712 updated cvss 7.4
openssl: Read buffer overruns processing ASN.1 strings
-
Red Hat Advanced Cluster Management for Kubernetes 2 rhacm2/management-ingress-rhel8affected: workaround, no fix available
-
Red Hat Enterprise Linux 6 openssl, openssl098e, openssl-perl Red Hat Enterprise Linux 7 openssl098eaffected: workaround, no fix planned “Out of support scope”
-
Red Hat Enterprise Linux 8 compat-openssl10affected: workaround, no fix planned “Will not fix”
-
Red Hat JBoss Web Server 3 opensslaffected: workaround, no fix planned “Out of support scope”
-
Red Hat Enterprise Linux BaseOS (v. 8) openssl 1.1.1k-5.el8_5, openssl-libs 1.1.1k-5.el8_5, openssl-perl 1.1.1k-5.el8_5fixed: vendor fix RHSA-2021:5226
-
Red Hat Enterprise Linux Client (v. 7) openssl 1.0.2k-23.el7_9, openssl-libs 1.0.2k-23.el7_9 Red Hat Enterprise Linux Client Optional (v. 7) openssl-perl 1.0.2k-23.el7_9 Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-perl 1.0.2k-23.el7_9 Red Hat Enterprise Linux Server (v. 7) openssl 1.0.2k-23.el7_9, openssl-libs 1.0.2k-23.el7_9 Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl 1.0.2k-23.el7_9 Red Hat Enterprise Linux Workstation (v. 7) openssl 1.0.2k-23.el7_9, openssl-libs 1.0.2k-23.el7_9fixed: vendor fix RHSA-2022:0064
+1 more productsfewer
Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl 1.0.2k-23.el7_9 -
Red Hat JBoss Core Servicesfixed: vendor fix RHSA-2021:4613
-
Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-apr 1.6.3-107.jbcs.el7, jbcs-httpd24-curl 7.78.0-2.jbcs.el7, jbcs-httpd24-httpd 2.4.37-78.jbcs.el7, jbcs-httpd24-mod_md 2.0.8-40.jbcs.el7, jbcs-httpd24-libcurl 7.78.0-2.jbcs.el7, jbcs-httpd24-openssl 1.1.1g-8.jbcs.el7, +26 more Red Hat JBoss Core Services on RHEL 8 jbcs-httpd24-apr 1.6.3-107.el8jbcs, jbcs-httpd24-curl 7.78.0-2.el8jbcs, jbcs-httpd24-httpd 2.4.37-78.el8jbcs, jbcs-httpd24-mod_md 2.0.8-40.el8jbcs, jbcs-httpd24-libcurl 7.78.0-2.el8jbcs, jbcs-httpd24-openssl 1.1.1g-8.el8jbcs, +26 morefixed: vendor fix RHSA-2021:4614
show 3 moreshow fewer
-
Red Hat JBoss Web Server 5fixed: vendor fix RHSA-2021:4863
-
Red Hat JBoss Web Server 5.6 for RHEL 7 Server jws5-tomcat 9.0.50-3.redhat_00004.1.el7jws, jws5-tomcat-native 1.2.30-3.redhat_3.el7jws, jws5-tomcat-lib 9.0.50-3.redhat_00004.1.el7jws, jws5-tomcat-javadoc 9.0.50-3.redhat_00004.1.el7jws, jws5-tomcat-selinux 9.0.50-3.redhat_00004.1.el7jws, jws5-tomcat-webapps 9.0.50-3.redhat_00004.1.el7jws, +9 more Red Hat JBoss Web Server 5.6 for RHEL 8 jws5-tomcat 9.0.50-3.redhat_00004.1.el8jws, jws5-tomcat-native 1.2.30-3.redhat_3.el8jws, jws5-tomcat-lib 9.0.50-3.redhat_00004.1.el8jws, jws5-tomcat-javadoc 9.0.50-3.redhat_00004.1.el8jws, jws5-tomcat-selinux 9.0.50-3.redhat_00004.1.el8jws, jws5-tomcat-webapps 9.0.50-3.redhat_00004.1.el8jws, +7 morefixed: vendor fix RHSA-2021:4861
-
Red Hat Enterprise Linux 9 openssl, openssl-libs, openssl-perlnot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
cisa ICSA-26-111-07 updated cvss 7.4
Siemens SCALANCE
-
Siemens SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) < 6.6.0 Siemens SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0) < 6.6.0 Siemens SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0) < 6.6.0 Siemens SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0) < 6.6.0 Siemens SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0) < 6.6.0 Siemens SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0) < 6.6.0affected: fixed in V6.6.0 support.industry.siemens.com
+34 more productsfewer
Siemens SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6) < 6.6.0 Siemens SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0) < 6.6.0 Siemens SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6) < 6.6.0 Siemens SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0) < 6.6.0 Siemens SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0) < 6.6.0 Siemens SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0) < 6.6.0 Siemens SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0) < 6.6.0 Siemens SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0) < 6.6.0 Siemens SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0) < 6.6.0 Siemens SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0) < 6.6.0 Siemens SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0) < 6.6.0 Siemens SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0) < 6.6.0 Siemens SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0) < 6.6.0 Siemens SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0) < 6.6.0 Siemens SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6) < 6.6.0 Siemens SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0) < 6.6.0 Siemens SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0) < 6.6.0 Siemens SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6) < 6.6.0 Siemens SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0) < 6.6.0 Siemens SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0) < 6.6.0 Siemens SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0) < 6.6.0 Siemens SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0) < 6.6.0 Siemens SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0) < 6.6.0 Siemens SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0) < 6.6.0 Siemens SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0) < 6.6.0 Siemens SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0) < 6.6.0 Siemens SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0) < 6.6.0 Siemens SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0) < 6.6.0 Siemens SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0) < 6.6.0 Siemens SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0) < 6.6.0 Siemens SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0) < 6.6.0 Siemens SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0) < 6.6.0 Siemens SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0) < 6.6.0 Siemens SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0) < 6.6.0
9 more affected in the full advisory
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-25-259-05 updated cvss 7.4
Siemens OpenSSL Vulnerability in Industrial Products
-
Siemens Industrial Edge - Machine Insight Appaffected: no fix planned
-
Siemens Industrial Edge - PROFINET IO Connector <V1.1.1affected: fixed in V1.1.1
-
Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) <V7.1 Siemens RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) <V7.1affected: fixed in V7.1 support.industry.siemens.com
-
Siemens RUGGEDCOM ROX MX5000 < 2.15.0 Siemens RUGGEDCOM ROX MX5000RE < 2.15.0 Siemens RUGGEDCOM ROX RX1400 < 2.15.0 Siemens RUGGEDCOM ROX RX1500 < 2.15.0 Siemens RUGGEDCOM ROX RX1501 < 2.15.0 Siemens RUGGEDCOM ROX RX1510 < 2.15.0affected: fixed in V2.15.0 support.industry.siemens.com
+5 more productsfewer
Siemens RUGGEDCOM ROX RX1511 < 2.15.0 Siemens RUGGEDCOM ROX RX1512 < 2.15.0 Siemens RUGGEDCOM ROX RX1524 < 2.15.0 Siemens RUGGEDCOM ROX RX1536 < 2.15.0 Siemens RUGGEDCOM ROX RX5000 < 2.15.0 -
Siemens SCALANCE M804PB (6GK5804-0AP00-2AA2) <V7.1 Siemens SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) <V7.1 Siemens SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) <V7.1 Siemens SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) <V7.1 Siemens SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) <V7.1 Siemens SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) <V7.1affected: fixed in V7.1 support.industry.siemens.com
+10 more productsfewer
Siemens SCALANCE M874-2 (6GK5874-2AA00-2AA2) <V7.1 Siemens SCALANCE M874-3 (6GK5874-3AA00-2AA2) <V7.1 Siemens SCALANCE M876-3 (6GK5876-3AA02-2BA2) <V7.1 Siemens SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) <V7.1 Siemens SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) <V7.1 Siemens SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) <V7.1 Siemens SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) < 7.1 Siemens SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) < 7.1 Siemens SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) < 7.1 Siemens SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) <V7.1 -
Siemens SCALANCE SC622-2C (6GK5622-2GS00-2AC2) <V2.3 Siemens SCALANCE SC632-2C (6GK5632-2GS00-2AC2) <V2.3 Siemens SCALANCE SC636-2C (6GK5636-2GS00-2AC2) <V2.3 Siemens SCALANCE SC642-2C (6GK5642-2GS00-2AC2) <V2.3 Siemens SCALANCE SC646-2C (6GK5646-2GS00-2AC2) <V2.3affected: fixed in V2.3 support.industry.siemens.com
-
Siemens SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) < 6.6.0 Siemens SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0) < 6.6.0 Siemens SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0) < 6.6.0 Siemens SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0) < 6.6.0affected: fixed in V6.6.0 support.industry.siemens.com
231 more affected in the full advisory
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-25-226-21 updated cvss 7.4
Siemens BFCClient
-
Siemens BFCClient < 2.17affected: fixed in V2.17
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-22-069-09 updated cvss 7.4
Siemens SINEC INS
-
Siemens SINEC INS <V1.0.1.1affected: fixed in V1.0.1.1 support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-23-143-02 updated cvss 7.4
Hitachi Energy's RTU500 Series Product (UPDATE B)
-
Hitachi Energy RTU500 series CMU Firmware >=12.0.1, <=12.0.15, >=12.2.1, <=12.2.12, >=12.4.1, <=12.4.12, >=12.6.1, <=12.6.9affected: vendor fix, mitigation “Hitachi Energy has released the following mitigations/fixes for CVE-2022-23937, CVE-2022-0778, CVE-2021-3711, and CVE-2021-3712:” search.abb.com
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
cisa ICSA-22-130-06 updated cvss 7.4
Mitsubishi Electric MELSOFT GT OPC UA
-
Mitsubishi Electric GT SoftGOT2000 >= 1.215Z, <= 1.270G Mitsubishi Electric MELSOFT GT OPC UA Client >= 1.00A, <= 1.02Caffected: fixed in 1.03D, mitigation “Mitsubishi Electric recommends users update software” mitsubishielectric.com
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 6 mo ago
Exploit prediction
48.08% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H |
| GitHub | 3.1 | 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H |
| NVD | 3.1 | 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H |
| CNA | 3.1 | 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H |
| NVD | 2.0 | 5.8 | AV:N/AC:M/Au:N/C:P/I:N/A:P |
| OSV | 3.1 | 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| crates.io | openssl-src | <111.16.0 >=0.0.0-0, <111.16.0 |
111.16.0 |
| julia | OpenSSL_jll | <1.1.13+0 |
1.1.13+0 |
| julia | Openresty_jll | <1.19.9+0 |
1.19.9+0 |
Affected products
- OpenSSL OpenSSL
- Siemens BFCClient
- Siemens Industrial Edge - Machine Insight App
- Siemens Industrial Edge - PROFINET IO Connector
- Siemens RUGGEDCOM RM1224 LTE(4G) EU
- Siemens RUGGEDCOM RM1224 LTE(4G) NAM
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Siemens RUGGEDCOM ROX RX1400
- Siemens RUGGEDCOM ROX RX1500
- Siemens RUGGEDCOM ROX RX1501
- Siemens RUGGEDCOM ROX RX1510
- Siemens RUGGEDCOM ROX RX1511
- Siemens RUGGEDCOM ROX RX1512
- Siemens RUGGEDCOM ROX RX1524
- Siemens RUGGEDCOM ROX RX1536
- Siemens RUGGEDCOM ROX RX5000
- Siemens SCALANCE M804PB
- Siemens SCALANCE M812-1 ADSL-Router
- Siemens SCALANCE M816-1 ADSL-Router
- Siemens SCALANCE M826-2 SHDSL-Router
- Siemens SCALANCE M874-2
- Siemens SCALANCE M874-3
- Siemens SCALANCE M876-3
- Siemens SCALANCE M876-3 (ROK)
- Siemens SCALANCE M876-4 (EU)
- Siemens SCALANCE M876-4 (NAM)
- Siemens SCALANCE MUM853-1 (EU)
- Siemens SCALANCE MUM856-1 (EU)
- Siemens SCALANCE MUM856-1 (RoW)
- Siemens SCALANCE S615 LAN-Router
- Siemens SCALANCE SC622-2C
- Siemens SCALANCE SC632-2C
- Siemens SCALANCE SC636-2C
- Siemens SCALANCE SC642-2C
- Siemens SCALANCE SC646-2C
- Siemens SCALANCE W1748-1 M12
- Siemens SCALANCE W1788-1 M12
- Siemens SCALANCE W1788-2 EEC M12
- Siemens SCALANCE W1788-2 M12
- Siemens SCALANCE W1788-2IA M12
- Siemens SCALANCE W721-1 RJ45
- Siemens SCALANCE W722-1 RJ45
- Siemens SCALANCE W734-1 RJ45
- Siemens SCALANCE W734-1 RJ45 (USA)
- Siemens SCALANCE W738-1 M12
- Siemens SCALANCE W748-1 M12
- Siemens SCALANCE W748-1 RJ45
- Siemens SCALANCE W761-1 RJ45
- Siemens SCALANCE W774-1 M12 EEC
Classification
- Weakness
-
- CWE-125 Out-of-bounds Read
- Technology feeds
References
-
oracle.com
/security-alerts/cpuoct2021.html
web, patch, third-party-advisory
-
tenable.com
/security/tns-2022-02
web, patch, third-party-advisory
-
oracle.com
/security-alerts/cpuapr2022.html
web, patch, third-party-advisory
-
cert-portal.siemens.com
/productcert/pdf/ssa-389290.pdf
web, patch, third-party-advisory
-
cert-portal.siemens.com
/productcert/pdf/ssa-244969.pdf
web, patch, third-party-advisory
-
debian.org
/security/2021/dsa-4963
vendor-advisory, web, third-party-advisory
-
security.gentoo.org
/glsa/202209-02
vendor-advisory, web, third-party-advisory
-
security.gentoo.org
/glsa/202210-02
vendor-advisory, web, third-party-advisory
-
openssl.org
/news/secadv/20210824.txt
web, vendor-advisory
-
git.openssl.org
/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11
web
-
git.openssl.org
/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12
web
-
lists.apache.org
/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E
mailing-list, web
-
openwall.com
/lists/oss-security/2021/08/26/2
mailing-list, third-party-advisory, web
-
lists.apache.org
/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E
mailing-list, web
-
security.netapp.com
/advisory/ntap-20210827-0010/
third-party-advisory, web
-
lists.debian.org
/debian-lts-announce/2021/09/msg00014.html
mailing-list, web, third-party-advisory
-
lists.debian.org
/debian-lts-announce/2021/09/msg00021.html
mailing-list, web, third-party-advisory
-
tenable.com
/security/tns-2021-16
web, third-party-advisory
-
kc.mcafee.com
/corporate/index?page=content&id=SB10366
web, third-party-advisory
-
oracle.com
/security-alerts/cpujan2022.html
web, third-party-advisory
-
security.netapp.com
/advisory/ntap-20240621-0006/
web
-
cert-portal.siemens.com
/productcert/html/ssa-244969.html
web
-
cert-portal.siemens.com
/productcert/html/ssa-389290.html
web
-
cert-portal.siemens.com
/productcert/html/ssa-028723.html
web
-
cert-portal.siemens.com
/productcert/html/ssa-019200.html
web
-
nvd.nist.gov
/vuln/detail/CVE-2021-3712
advisory, web
-
openwall.com
/lists/oss-security/2021/08/26/2
web
-
security.netapp.com
/advisory/ntap-20240621-0006
web
-
security.netapp.com
/advisory/ntap-20210827-0010
web
-
rustsec.org
/advisories/RUSTSEC-2021-0098.html
web, advisory
-
lists.apache.org
/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E
web
-
lists.apache.org
/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E
web
-
git.openssl.org
/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12
web
-
git.openssl.org
/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11
web
-
github.com
/advisories/GHSA-q9wj-f4qw-6vfj
web
-
crates.io
/crates/openssl-src
package
Sources
- CVE List CVE-2021-3712
- GitHub Advisory GHSA-q9wj-f4qw-6vfj
- NVD CVE-2021-3712
- OSV JLSEC-2026-225
- OSV RUSTSEC-2021-0098
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.