CVE-2021-31895

CVE-2021-31895 is a critical vulnerability affecting numerous Siemens RUGGEDCOM devices across multiple product lines and versions. The flaw lies in the DHCP client's failure to properly sanitize incoming DHCP packets, leading to a memory overwrite vulnerability. This could allow an unauthenticated remote attacker to achieve remote code execution (RCE) with a CVSS score of 9.8 (Critical). The attack vector is network-based with low attack complexity, requiring no user interaction or privileges. A successful exploit could result in complete compromise of confidentiality, integrity, and availability of the affected device. Currently, there is no evidence of active exploitation in the wild, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Despite the lack of public exploits, the vulnerability has garnered significant community discussion, indicating awareness and potential interest among security researchers.