What is CVE-2021-37740?

CVE-2021-37740 is a high-severity vulnerability in Mdt Scn-Ip000.03. CVSS score: 7.5/10. Published 2022-04-20.

How severe is CVE-2021-37740?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2021-37740 known to be exploited?

11 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Mdt Scn-Ip000.03

CVE-2021-37740

A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a SESSION_REQUEST frame with a modified total length field.

EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_MISC, Broken Link)
cve@mitre.org (x_refsource_MISC, Release Notes, Vendor Advisory)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC, Release Notes)

Frequently asked questions

What is CVE-2021-37740?: CVE-2021-37740 is a high-severity vulnerability in Mdt Scn-Ip000.03. CVSS score: 7.5/10. Published 2022-04-20.
How severe is CVE-2021-37740?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2021-37740 known to be exploited?: 11 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.