Skip to content
Fencer Vulns
high 7.5

CVE-2021-37182 json

A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE…

published 2022-06-14 4 y ago modified 2026-06-17 4 mo ago also EUVD-2021-23756

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 51%
public exploits
0
none known

Summary

A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5), SCALANCE XM416-4C (All versions < V6.5), SCALANCE XM416-4C (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 1x230V (All versions < V6.5), SCALANCE XR524-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 24V (All versions < V6.5), SCALANCE XR524-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 2x230V (All versions < V6.5), SCALANCE XR524-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 1x230V (All versions < V6.5), SCALANCE XR526-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 24V (All versions < V6.5), SCALANCE XR526-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 2x230V (All versions < V6.5), SCALANCE XR526-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR528-6M (All versions < V6.5), SCALANCE XR528-6M (2HR2) (All versions < V6.5), SCALANCE XR528-6M (2HR2, L3 int.) (All versions < V6.5), SCALANCE XR528-6M (L3 int.) (All versions < V6.5), SCALANCE XR552-12M (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2, L3 int.) (All versions < V6.5). The OSPF protocol implementation in affected devices fails to verify the checksum and length fields in the OSPF LS Update messages. An unauthenticated remote attacker could exploit this vulnerability to cause interruptions in the network by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.

Patch / fix

  • siemens scalance_xm408-4c_firmware 6.5
  • siemens scalance_xm408-4c_l3_firmware 6.5
  • siemens scalance_xm408-8c_firmware 6.5
  • siemens scalance_xm408-8c_l3_firmware 6.5
  • siemens scalance_xm416-4c_firmware 6.5
  • siemens scalance_xm416-4c_l3_firmware 6.5
  • siemens scalance_xr524-8c_firmware 6.5
  • siemens scalance_xr524-8c_l3_firmware 6.5
  • siemens scalance_xr526-8c_firmware 6.5
  • siemens scalance_xr526-8c_l3_firmware 6.5
  • siemens scalance_xr528-6m_firmware 6.5
  • siemens scalance_xr528-6m_2hr2_firmware 6.5
  • siemens scalance_xr528-6m_2hr2_l3_firmware 6.5
  • siemens scalance_xr528-6m_l3_firmware 6.5
  • siemens scalance_xr552-12m_firmware 6.5
  • siemens scalance_xr552-12m_2hr2_firmware 6.5
  • siemens scalance_xr552-12m_2hr2_l3_firmware 6.5

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-22-167-10 updated cvss 5.9

Siemens SCALANCE XM-400 and XR-500

  • Siemens SCALANCE XM408-4C <V6.5 Siemens SCALANCE XM408-4C (L3 int.) <V6.5 Siemens SCALANCE XM408-8C <V6.5 Siemens SCALANCE XM408-8C (L3 int.) <V6.5 Siemens SCALANCE XM416-4C <V6.5 Siemens SCALANCE XM416-4C (L3 int.) <V6.5
    +19 more products
    Siemens SCALANCE XR524-8C, 1x230V <V6.5 Siemens SCALANCE XR524-8C, 1x230V (L3 int.) <V6.5 Siemens SCALANCE XR524-8C, 2x230V <V6.5 Siemens SCALANCE XR524-8C, 2x230V (L3 int.) <V6.5 Siemens SCALANCE XR524-8C, 24V <V6.5 Siemens SCALANCE XR524-8C, 24V (L3 int.) <V6.5 Siemens SCALANCE XR526-8C, 1x230V <V6.5 Siemens SCALANCE XR526-8C, 1x230V (L3 int.) <V6.5 Siemens SCALANCE XR526-8C, 2x230V <V6.5 Siemens SCALANCE XR526-8C, 2x230V (L3 int.) <V6.5 Siemens SCALANCE XR526-8C, 24V <V6.5 Siemens SCALANCE XR526-8C, 24V (L3 int.) <V6.5 Siemens SCALANCE XR528-6M <V6.5 Siemens SCALANCE XR528-6M (2HR2, L3 int.) <V6.5 Siemens SCALANCE XR528-6M (2HR2) <V6.5 Siemens SCALANCE XR528-6M (L3 int.) <V6.5 Siemens SCALANCE XR552-12M <V6.5 Siemens SCALANCE XR552-12M (2HR2, L3 int.) <V6.5 Siemens SCALANCE XR552-12M (2HR2) <V6.5
    affected: fixed in V6.5, mitigation support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

0.64% chance of exploitation in the next 30 days, higher than 51% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

  • Siemens SCALANCE XM408-4C
  • Siemens SCALANCE XM408-4C (L3 int.)
  • Siemens SCALANCE XM408-8C
  • Siemens SCALANCE XM408-8C (L3 int.)
  • Siemens SCALANCE XM416-4C
  • Siemens SCALANCE XM416-4C (L3 int.)
  • Siemens SCALANCE XR524-8C, 1x230V
  • Siemens SCALANCE XR524-8C, 1x230V (L3 int.)
  • Siemens SCALANCE XR524-8C, 24V
  • Siemens SCALANCE XR524-8C, 24V (L3 int.)
  • Siemens SCALANCE XR524-8C, 2x230V
  • Siemens SCALANCE XR524-8C, 2x230V (L3 int.)
  • Siemens SCALANCE XR526-8C, 1x230V
  • Siemens SCALANCE XR526-8C, 1x230V (L3 int.)
  • Siemens SCALANCE XR526-8C, 24V
  • Siemens SCALANCE XR526-8C, 24V (L3 int.)
  • Siemens SCALANCE XR526-8C, 2x230V
  • Siemens SCALANCE XR526-8C, 2x230V (L3 int.)
  • Siemens SCALANCE XR528-6M
  • Siemens SCALANCE XR528-6M (2HR2)
  • Siemens SCALANCE XR528-6M (2HR2, L3 int.)
  • Siemens SCALANCE XR528-6M (L3 int.)
  • Siemens SCALANCE XR552-12M
  • Siemens SCALANCE XR552-12M (2HR2)
  • Siemens SCALANCE XR552-12M (2HR2, L3 int.)

Classification

Weakness
  • CWE-354 Improper Validation of Integrity Check Value

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.