Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2021-37740 Details
Description
A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a SESSION_REQUEST frame with a modified total length field.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/robertguetzkow/CVE-2021-37740 | CVE | ExploitRelease NotesThird Party Advisory |
| https://www.mdt.de/download/MDT_CL_SCN_IP_03_IP_Interface_Router.pdf | CVE | Release NotesVendor Advisory |
| https://www.mdt.de/EN_IP_Interface_Router.html | CVE | Broken Link |
| https://github.com/robertguetzkow/CVE-2021-37740 | [email protected] | ExploitRelease NotesThird Party Advisory |
| https://www.mdt.de/download/MDT_CL_SCN_IP_03_IP_Interface_Router.pdf | [email protected] | Release NotesVendor Advisory |
| https://www.mdt.de/EN_IP_Interface_Router.html | [email protected] | Broken Link |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mdt scn-ip000.03 firmware | < 3.0.4 |
CPE
Remediation
| |
| mdt scn-ip000.03 | All versions |
CPE
Remediation
| |
| mdt scn-ip100.03 firmware | < 3.0.4 |
CPE
Remediation
| |
| mdt scn-ip100.03 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| May 3, 2022 | Initial Analysis | [email protected] |