Vulnerability-Lookup

CNVD-2021-28698

Vulnerability from cnvd - Published: 2021-04-15

Title

Siemens Nucleus产品DNS模块可预测UDP端口号漏洞

Description

Nucleus NET模块包含了一系列符合标准的网络和通信协议、驱动程序和实用程序，以在任何嵌入式设备中提供全功能的网络支持。Nucleus RTOS提供了一个高度可扩展的基于微内核的实时操作系统，该系统设计用于航天、工业和医疗应用范围内的系统的可扩展性和可靠性。VSTAR是一个完整的基于AUTOSAR 4的ECU解决方案，为及时部署产品提供工具和嵌入式软件。Nucleus ReadyStart是一个具有集成软件IP、工具和服务的平台。 Siemens Nucleus产品DNS模块存在安全漏洞。该漏洞是由于DNS客户端未正确随机化UDP端口数的DNS请求。攻击者可利用漏洞导致DNS缓存中毒或欺骗DNS解析。

Severity

中

Patch Name

Siemens Nucleus产品DNS模块可预测UDP端口号漏洞的补丁

Patch Description

Formal description

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf

Reference

https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf

Impacted products

Name
['Siemens Nucleus NET', 'Siemens Nucleus RTOS', 'Siemens Nucleus Source Code', 'Siemens VSTAR', 'Siemens Nucleus ReadyStart < V2013.08']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-27393"
    }
  },
  "description": "Nucleus NET\u6a21\u5757\u5305\u542b\u4e86\u4e00\u7cfb\u5217\u7b26\u5408\u6807\u51c6\u7684\u7f51\u7edc\u548c\u901a\u4fe1\u534f\u8bae\u3001\u9a71\u52a8\u7a0b\u5e8f\u548c\u5b9e\u7528\u7a0b\u5e8f\uff0c\u4ee5\u5728\u4efb\u4f55\u5d4c\u5165\u5f0f\u8bbe\u5907\u4e2d\u63d0\u4f9b\u5168\u529f\u80fd\u7684\u7f51\u7edc\u652f\u6301\u3002Nucleus RTOS\u63d0\u4f9b\u4e86\u4e00\u4e2a\u9ad8\u5ea6\u53ef\u6269\u5c55\u7684\u57fa\u4e8e\u5fae\u5185\u6838\u7684\u5b9e\u65f6\u64cd\u4f5c\u7cfb\u7edf\uff0c\u8be5\u7cfb\u7edf\u8bbe\u8ba1\u7528\u4e8e\u822a\u5929\u3001\u5de5\u4e1a\u548c\u533b\u7597\u5e94\u7528\u8303\u56f4\u5185\u7684\u7cfb\u7edf\u7684\u53ef\u6269\u5c55\u6027\u548c\u53ef\u9760\u6027\u3002VSTAR\u662f\u4e00\u4e2a\u5b8c\u6574\u7684\u57fa\u4e8eAUTOSAR 4\u7684ECU\u89e3\u51b3\u65b9\u6848\uff0c\u4e3a\u53ca\u65f6\u90e8\u7f72\u4ea7\u54c1\u63d0\u4f9b\u5de5\u5177\u548c\u5d4c\u5165\u5f0f\u8f6f\u4ef6\u3002Nucleus ReadyStart\u662f\u4e00\u4e2a\u5177\u6709\u96c6\u6210\u8f6f\u4ef6IP\u3001\u5de5\u5177\u548c\u670d\u52a1\u7684\u5e73\u53f0\u3002\n\nSiemens Nucleus\u4ea7\u54c1DNS\u6a21\u5757\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8eDNS\u5ba2\u6237\u7aef\u672a\u6b63\u786e\u968f\u673a\u5316UDP\u7aef\u53e3\u6570\u7684DNS\u8bf7\u6c42\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u5bfc\u81f4DNS\u7f13\u5b58\u4e2d\u6bd2\u6216\u6b3a\u9a97DNS\u89e3\u6790\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-28698",
  "openTime": "2021-04-15",
  "patchDescription": "Nucleus NET\u6a21\u5757\u5305\u542b\u4e86\u4e00\u7cfb\u5217\u7b26\u5408\u6807\u51c6\u7684\u7f51\u7edc\u548c\u901a\u4fe1\u534f\u8bae\u3001\u9a71\u52a8\u7a0b\u5e8f\u548c\u5b9e\u7528\u7a0b\u5e8f\uff0c\u4ee5\u5728\u4efb\u4f55\u5d4c\u5165\u5f0f\u8bbe\u5907\u4e2d\u63d0\u4f9b\u5168\u529f\u80fd\u7684\u7f51\u7edc\u652f\u6301\u3002Nucleus RTOS\u63d0\u4f9b\u4e86\u4e00\u4e2a\u9ad8\u5ea6\u53ef\u6269\u5c55\u7684\u57fa\u4e8e\u5fae\u5185\u6838\u7684\u5b9e\u65f6\u64cd\u4f5c\u7cfb\u7edf\uff0c\u8be5\u7cfb\u7edf\u8bbe\u8ba1\u7528\u4e8e\u822a\u5929\u3001\u5de5\u4e1a\u548c\u533b\u7597\u5e94\u7528\u8303\u56f4\u5185\u7684\u7cfb\u7edf\u7684\u53ef\u6269\u5c55\u6027\u548c\u53ef\u9760\u6027\u3002VSTAR\u662f\u4e00\u4e2a\u5b8c\u6574\u7684\u57fa\u4e8eAUTOSAR 4\u7684ECU\u89e3\u51b3\u65b9\u6848\uff0c\u4e3a\u53ca\u65f6\u90e8\u7f72\u4ea7\u54c1\u63d0\u4f9b\u5de5\u5177\u548c\u5d4c\u5165\u5f0f\u8f6f\u4ef6\u3002Nucleus ReadyStart\u662f\u4e00\u4e2a\u5177\u6709\u96c6\u6210\u8f6f\u4ef6IP\u3001\u5de5\u5177\u548c\u670d\u52a1\u7684\u5e73\u53f0\u3002\r\n\r\nSiemens Nucleus\u4ea7\u54c1DNS\u6a21\u5757\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8eDNS\u5ba2\u6237\u7aef\u672a\u6b63\u786e\u968f\u673a\u5316UDP\u7aef\u53e3\u6570\u7684DNS\u8bf7\u6c42\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u5bfc\u81f4DNS\u7f13\u5b58\u4e2d\u6bd2\u6216\u6b3a\u9a97DNS\u89e3\u6790\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens Nucleus\u4ea7\u54c1DNS\u6a21\u5757\u53ef\u9884\u6d4bUDP\u7aef\u53e3\u53f7\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens Nucleus NET",
      "Siemens Nucleus RTOS",
      "Siemens Nucleus Source Code",
      "Siemens VSTAR",
      "Siemens Nucleus ReadyStart \u003c V2013.08"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf",
  "serverity": "\u4e2d",
  "submitTime": "2021-04-13",
  "title": "Siemens Nucleus\u4ea7\u54c1DNS\u6a21\u5757\u53ef\u9884\u6d4bUDP\u7aef\u53e3\u53f7\u6f0f\u6d1e"
}

CVE-2021-27393 (GCVE-0-2021-27393)

Vulnerability from cvelistv5 – Published: 2021-04-22 20:42 – Updated: 2024-08-03 20:48

Summary

A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.

Severity

No CVSS data available.

CWE

CWE-330 - Use of Insufficiently Random Values

Assigner

siemens icscert root

References

1 reference

URL	Tags
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_MISC

Impacted products

3 products

Vendor	Product	Version
Siemens	Nucleus NET	Affected: All versions
Siemens	Nucleus ReadyStart V3	Affected: All versions < V2013.08
Siemens	Nucleus Source Code	Affected: Versions including affected DNS modules

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T20:48:16.739Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Nucleus NET",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        },
        {
          "product": "Nucleus ReadyStart V3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V2013.08"
            }
          ]
        },
        {
          "product": "Nucleus Source Code",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "Versions including affected DNS modules"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-330",
              "description": "CWE-330: Use of Insufficiently Random Values",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-01-11T11:27:04.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2021-27393",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Nucleus NET",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Nucleus ReadyStart V3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V2013.08"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Nucleus Source Code",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Versions including affected DNS modules"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-330: Use of Insufficiently Random Values"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2021-27393",
    "datePublished": "2021-04-22T20:42:21.000Z",
    "dateReserved": "2021-02-18T00:00:00.000Z",
    "dateUpdated": "2024-08-03T20:48:16.739Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2021-28698

CVE-2021-27393 (GCVE-0-2021-27393)

Tags

Sightings

Nomenclature

Related by attack behaviour