Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2021-25663 (GCVE-0-2021-25663)
Vulnerability from cvelistv5
- CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
URL | Tags | ||
---|---|---|---|
|
Vendor | Product | Version | |||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Siemens | Capital Embedded AR Classic 431-422 |
Version: 0 < * |
|||||||||||||||||||||||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T20:11:27.118Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05" }, { "tags": [ "x_transferred" ], "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "unknown", "product": "Capital Embedded AR Classic 431-422", "vendor": "Siemens", "versions": [ { "lessThan": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "defaultStatus": "unknown", "product": "Capital Embedded AR Classic R20-11", "vendor": "Siemens", "versions": [ { "lessThan": "V2303", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "defaultStatus": "unknown", "product": "Nucleus NET", "vendor": "Siemens", "versions": [ { "status": "affected", "version": "All versions" } ] }, { "defaultStatus": "unknown", "product": "Nucleus ReadyStart V3", "vendor": "Siemens", "versions": [ { "lessThan": "V2017.02.4", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "defaultStatus": "unknown", "product": "Nucleus ReadyStart V4", "vendor": "Siemens", "versions": [ { "lessThan": "V4.1.0", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "defaultStatus": "unknown", "product": "Nucleus Source Code", "vendor": "Siemens", "versions": [ { "lessThan": "*", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "descriptions": [ { "lang": "en", "value": "A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions \u003c V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2017.02.4), Nucleus ReadyStart V4 (All versions \u003c V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values." } ], "metrics": [ { "cvssV3_1": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" } }, { "cvssV4_0": { "baseScore": 8.7, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "version": "4.0" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-835", "description": "CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2025-03-11T09:47:33.806Z", "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" } ] } }, "cveMetadata": { "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "assignerShortName": "siemens", "cveId": "CVE-2021-25663", "datePublished": "2021-04-22T20:42:20", "dateReserved": "2021-01-21T00:00:00", "dateUpdated": "2025-03-11T09:47:33.806Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2021-25663\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2021-04-22T21:15:09.957\",\"lastModified\":\"2025-03-11T10:15:13.240\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions \u003c V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2017.02.4), Nucleus ReadyStart V4 (All versions \u003c V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en Capital VSTAR (Versiones que incluyen la pila IPv6 afectada), Nucleus NET (Todas las versiones), Nucleus ReadyStart V3 (Todas las versiones anteriores a V2017.02.4), Nucleus ReadyStart V4 (Todas las versiones anteriores a V4.1.0), Nucleus Source Code (Versiones que incluyen la pila IPv6 afectada). La funci\u00f3n que procesa las cabeceras de IPv6 no comprueba las longitudes de las opciones de las cabeceras de extensi\u00f3n, lo que permite a los atacantes poner esta funci\u00f3n en un bucle infinito con valores de longitud manipulados\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":8.7,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-835\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-835\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:capital_vstar:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EEBF34F7-F37A-4FD1-957E-B2E5DEE7A778\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A987CFB-4A41-4F82-8C7F-31DE8F0650DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:nucleus_readystart:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.1.0\",\"matchCriteriaId\":\"7A5FA7B8-2F94-4762-ADBF-71C0F37231AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53A38C64-612A-4BC5-83D5-D3FA1C90E0F7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:nucleus_readystart:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2017.02.4\",\"matchCriteriaId\":\"F768DEFE-CE6F-4210-B728-9C4CA2AF03FE\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-248289.html\",\"source\":\"productcert@siemens.com\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf\",\"source\":\"productcert@siemens.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05\",\"source\":\"productcert@siemens.com\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-248289.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]}]}}" } }
var-202104-1925
Vulnerability from variot
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values. The Nucleus NET module contains a series of standard-compliant network and communication protocols, drivers and utilities to provide full-featured network support in any embedded device. Nucleus RTOS provides a highly scalable microkernel-based real-time operating system designed for the scalability and reliability of systems in aerospace, industrial and medical applications. VSTAR is a complete AUTOSAR 4 based ECU solution that provides tools and embedded software for timely product deployment. Nucleus ReadyStart is a platform with integrated software IP, tools and services.
Siemens Nucleus products have security vulnerabilities. Pillow is a Python-based image processing library. There is currently no information about this vulnerability, please feel free to follow CNNVD or manufacturer announcements
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-202104-1925", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "nucleus readystart", "scope": "lt", "trust": 1.0, "vendor": "siemens", "version": "4.1.0" }, { "model": "nucleus source code", "scope": "eq", "trust": 1.0, "vendor": "siemens", "version": null }, { "model": "nucleus readystart", "scope": "lt", "trust": 1.0, "vendor": "siemens", "version": "2017.02.4" }, { "model": "capital vstar", "scope": "eq", "trust": 1.0, "vendor": "siemens", "version": null }, { "model": "nucleus net", "scope": "eq", "trust": 1.0, "vendor": "siemens", "version": "*" }, { "model": "vstar", "scope": null, "trust": 0.6, "vendor": "siemens", "version": null }, { "model": "nucleus source code", "scope": null, "trust": 0.6, "vendor": "siemens", "version": null }, { "model": "nucleus net", "scope": null, "trust": 0.6, "vendor": "siemens", "version": null }, { "model": "nucleus readystart", "scope": null, "trust": 0.6, "vendor": "siemens", "version": null }, { "model": "nucleus", "scope": "eq", "trust": 0.6, "vendor": "siemens", "version": "4\u003cv4.1.0" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2021-28697" }, { "db": "NVD", "id": "CVE-2021-25663" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Siemens reported these vulnerabilities to CISA.", "sources": [ { "db": "CNNVD", "id": "CNNVD-202104-995" } ], "trust": 0.6 }, "cve": "CVE-2021-25663", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "CVE-2021-25663", "impactScore": 2.9, "integrityImpact": "NONE", "severity": "MEDIUM", "trust": 1.1, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "CNVD-2021-28697", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "HIGH", "trust": 0.6, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "nvd@nist.gov", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "exploitabilityScore": 3.9, "id": "CVE-2021-25663", "impactScore": 3.6, "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 2.0, "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2021-25663", "trust": 1.0, "value": "HIGH" }, { "author": "productcert@siemens.com", "id": "CVE-2021-25663", "trust": 1.0, "value": "HIGH" }, { "author": "CNVD", "id": "CNVD-2021-28697", "trust": 0.6, "value": "HIGH" }, { "author": "CNNVD", "id": "CNNVD-202104-975", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-202104-995", "trust": 0.6, "value": "HIGH" }, { "author": "VULMON", "id": "CVE-2021-25663", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2021-28697" }, { "db": "VULMON", "id": "CVE-2021-25663" }, { "db": "CNNVD", "id": "CNNVD-202104-975" }, { "db": "CNNVD", "id": "CNNVD-202104-995" }, { "db": "NVD", "id": "CVE-2021-25663" }, { "db": "NVD", "id": "CVE-2021-25663" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions \u003c V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2017.02.4), Nucleus ReadyStart V4 (All versions \u003c V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values. The Nucleus NET module contains a series of standard-compliant network and communication protocols, drivers and utilities to provide full-featured network support in any embedded device. Nucleus RTOS provides a highly scalable microkernel-based real-time operating system designed for the scalability and reliability of systems in aerospace, industrial and medical applications. VSTAR is a complete AUTOSAR 4 based ECU solution that provides tools and embedded software for timely product deployment. Nucleus ReadyStart is a platform with integrated software IP, tools and services. \n\r\n\r\nSiemens Nucleus products have security vulnerabilities. Pillow is a Python-based image processing library. \nThere is currently no information about this vulnerability, please feel free to follow CNNVD or manufacturer announcements", "sources": [ { "db": "NVD", "id": "CVE-2021-25663" }, { "db": "CNVD", "id": "CNVD-2021-28697" }, { "db": "CNNVD", "id": "CNNVD-202104-975" }, { "db": "VULMON", "id": "CVE-2021-25663" } ], "trust": 2.07 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "SIEMENS", "id": "SSA-248289", "trust": 2.3 }, { "db": "NVD", "id": "CVE-2021-25663", "trust": 2.3 }, { "db": "ICS CERT", "id": "ICSA-21-103-05", "trust": 1.7 }, { "db": "CNVD", "id": "CNVD-2021-28697", "trust": 0.6 }, { "db": "CS-HELP", "id": "SB2021041363", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-202104-975", "trust": 0.6 }, { "db": "CS-HELP", "id": "SB2021041414", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2021.1245", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-202104-995", "trust": 0.6 }, { "db": "VULMON", "id": "CVE-2021-25663", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2021-28697" }, { "db": "VULMON", "id": "CVE-2021-25663" }, { "db": "CNNVD", "id": "CNNVD-202104-975" }, { "db": "CNNVD", "id": "CNNVD-202104-995" }, { "db": "NVD", "id": "CVE-2021-25663" } ] }, "id": "VAR-202104-1925", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2021-28697" } ], "trust": 1.1225228600000001 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2021-28697" } ] }, "last_update_date": "2024-11-23T20:09:48.510000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Patch for Siemens Nucleus product IPv6 stack denial of service vulnerability", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchInfo/show/258466" }, { "title": "siemens Nucleus Security vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=147375" }, { "title": "Siemens Security Advisories: Siemens Security Advisory", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories\u0026qid=2e667a20dc904cea13ad0154c0461a55" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2021-28697" }, { "db": "VULMON", "id": "CVE-2021-25663" }, { "db": "CNNVD", "id": "CNNVD-202104-995" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-835", "trust": 1.0 } ], "sources": [ { "db": "NVD", "id": "CVE-2021-25663" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.3, "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf" }, { "trust": 2.3, "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05" }, { "trust": 1.0, "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" }, { "trust": 0.6, "url": "https://www.cybersecurity-help.cz/vdb/sb2021041363" }, { "trust": 0.6, "url": "https://www.cybersecurity-help.cz/vdb/sb2021041414" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2021.1245" }, { "trust": 0.6, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-25663" }, { "trust": 0.1, "url": "https://cwe.mitre.org/data/definitions/835.html" }, { "trust": 0.1, "url": "https://nvd.nist.gov" }, { "trust": 0.1, "url": "https://cert-portal.siemens.com/productcert/txt/ssa-248289.txt" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2021-28697" }, { "db": "VULMON", "id": "CVE-2021-25663" }, { "db": "CNNVD", "id": "CNNVD-202104-975" }, { "db": "CNNVD", "id": "CNNVD-202104-995" }, { "db": "NVD", "id": "CVE-2021-25663" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2021-28697" }, { "db": "VULMON", "id": "CVE-2021-25663" }, { "db": "CNNVD", "id": "CNNVD-202104-975" }, { "db": "CNNVD", "id": "CNNVD-202104-995" }, { "db": "NVD", "id": "CVE-2021-25663" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2021-04-15T00:00:00", "db": "CNVD", "id": "CNVD-2021-28697" }, { "date": "2021-04-22T00:00:00", "db": "VULMON", "id": "CVE-2021-25663" }, { "date": "2021-04-13T00:00:00", "db": "CNNVD", "id": "CNNVD-202104-975" }, { "date": "2021-04-13T00:00:00", "db": "CNNVD", "id": "CNNVD-202104-995" }, { "date": "2021-04-22T21:15:09.957000", "db": "NVD", "id": "CVE-2021-25663" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2021-04-15T00:00:00", "db": "CNVD", "id": "CNVD-2021-28697" }, { "date": "2021-04-30T00:00:00", "db": "VULMON", "id": "CVE-2021-25663" }, { "date": "2021-04-14T00:00:00", "db": "CNNVD", "id": "CNNVD-202104-975" }, { "date": "2021-11-18T00:00:00", "db": "CNNVD", "id": "CNNVD-202104-995" }, { "date": "2024-11-21T05:55:14.813000", "db": "NVD", "id": "CVE-2021-25663" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-202104-995" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Siemens Nucleus product IPv6 stack denial of service vulnerability", "sources": [ { "db": "CNVD", "id": "CNVD-2021-28697" } ], "trust": 0.6 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "other", "sources": [ { "db": "CNNVD", "id": "CNNVD-202104-975" }, { "db": "CNNVD", "id": "CNNVD-202104-995" } ], "trust": 1.2 } }
ssa-248289
Vulnerability from csaf_siemens
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)", "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "summary", "text": "The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition.\n\nSiemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.", "title": "Summary" }, { "category": "general", "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", "title": "General Recommendations" }, { "category": "general", "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", "title": "Additional Resources" }, { "category": "legal_disclaimer", "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "productcert@siemens.com", "name": "Siemens ProductCERT", "namespace": "https://www.siemens.com" }, "references": [ { "category": "self", "summary": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - HTML Version", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" }, { "category": "self", "summary": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - CSAF Version", "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-248289.json" }, { "category": "self", "summary": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - PDF Version", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf" }, { "category": "self", "summary": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - TXT Version", "url": "https://cert-portal.siemens.com/productcert/txt/ssa-248289.txt" } ], "title": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS", "tracking": { "current_release_date": "2024-02-13T00:00:00Z", "generator": { "engine": { "name": "Siemens ProductCERT CSAF Generator", "version": "1" } }, "id": "SSA-248289", "initial_release_date": "2021-04-13T00:00:00Z", "revision_history": [ { "date": "2021-04-13T00:00:00Z", "legacy_version": "1.0", "number": "1", "summary": "Publication Date" }, { "date": "2021-11-09T00:00:00Z", "legacy_version": "1.1", "number": "2", "summary": "Added solution for Nucleus ReadyStart V3; consolidated list of products" }, { "date": "2024-02-13T00:00:00Z", "legacy_version": "1.2", "number": "3", "summary": "Renamed Capital VSTAR to Capital Embedded AR Classic; added fix and mitigation for Capital Embedded AR Classic; added CVSSv4.0 vector and score" } ], "status": "interim", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Capital Embedded AR Classic 431-422", "product_id": "1" } } ], "category": "product_name", "name": "Capital Embedded AR Classic 431-422" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV2303", "product": { "name": "Capital Embedded AR Classic R20-11", "product_id": "2" } } ], "category": "product_name", "name": "Capital Embedded AR Classic R20-11" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Nucleus NET", "product_id": "3" } } ], "category": "product_name", "name": "Nucleus NET" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV2017.02.4", "product": { "name": "Nucleus ReadyStart V3", "product_id": "4" } } ], "category": "product_name", "name": "Nucleus ReadyStart V3" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV4.1.0", "product": { "name": "Nucleus ReadyStart V4", "product_id": "5" } } ], "category": "product_name", "name": "Nucleus ReadyStart V4" }, { "branches": [ { "category": "product_version_range", "name": "All versions including affected IPv6 stack", "product": { "name": "Nucleus Source Code", "product_id": "6" } } ], "category": "product_name", "name": "Nucleus Source Code" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-25663", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.", "title": "Summary" } ], "product_status": { "known_affected": [ "1", "2", "3", "4", "5", "6" ] }, "remediations": [ { "category": "mitigation", "details": "Contact customer support or your local Nucleus Sales team for mitigation advice", "product_ids": [ "3" ] }, { "category": "mitigation", "details": "Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option", "product_ids": [ "1", "2" ] }, { "category": "mitigation", "details": "Update to the latest version of Nucleus ReadyStart V3 or V4", "product_ids": [ "3" ] }, { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "3" ] }, { "category": "none_available", "details": "Currently no fix is available", "product_ids": [ "1" ] }, { "category": "vendor_fix", "details": "Update to V2017.02.4 or later version", "product_ids": [ "4" ] }, { "category": "vendor_fix", "details": "Update to V2303 or later version", "product_ids": [ "2" ] }, { "category": "vendor_fix", "details": "Update to V4.1.0 or later version", "product_ids": [ "5" ] }, { "category": "vendor_fix", "details": "Contact customer support to receive patch and update information", "product_ids": [ "6" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "1", "2", "3", "4", "5", "6" ] } ], "title": "CVE-2021-25663" }, { "cve": "CVE-2021-25664", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "The function that processes the Hop-by-Hop extension header in IPv6 packets and its options lacks any checks against the length field of the header, allowing attackers to put the function into an infinite loop by supplying arbitrary length values.", "title": "Summary" } ], "product_status": { "known_affected": [ "1", "2", "3", "4", "5", "6" ] }, "remediations": [ { "category": "mitigation", "details": "Contact customer support or your local Nucleus Sales team for mitigation advice", "product_ids": [ "3" ] }, { "category": "mitigation", "details": "Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option", "product_ids": [ "1", "2" ] }, { "category": "mitigation", "details": "Update to the latest version of Nucleus ReadyStart V3 or V4", "product_ids": [ "3" ] }, { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "3" ] }, { "category": "none_available", "details": "Currently no fix is available", "product_ids": [ "1" ] }, { "category": "vendor_fix", "details": "Update to V2017.02.4 or later version", "product_ids": [ "4" ] }, { "category": "vendor_fix", "details": "Update to V2303 or later version", "product_ids": [ "2" ] }, { "category": "vendor_fix", "details": "Update to V4.1.0 or later version", "product_ids": [ "5" ] }, { "category": "vendor_fix", "details": "Contact customer support to receive patch and update information", "product_ids": [ "6" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "1", "2", "3", "4", "5", "6" ] } ], "title": "CVE-2021-25664" } ] }
SSA-248289
Vulnerability from csaf_siemens
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)", "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "summary", "text": "The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition.\n\nSiemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.", "title": "Summary" }, { "category": "general", "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", "title": "General Recommendations" }, { "category": "general", "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", "title": "Additional Resources" }, { "category": "legal_disclaimer", "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "productcert@siemens.com", "name": "Siemens ProductCERT", "namespace": "https://www.siemens.com" }, "references": [ { "category": "self", "summary": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - HTML Version", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" }, { "category": "self", "summary": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - CSAF Version", "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-248289.json" }, { "category": "self", "summary": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - PDF Version", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf" }, { "category": "self", "summary": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - TXT Version", "url": "https://cert-portal.siemens.com/productcert/txt/ssa-248289.txt" } ], "title": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS", "tracking": { "current_release_date": "2024-02-13T00:00:00Z", "generator": { "engine": { "name": "Siemens ProductCERT CSAF Generator", "version": "1" } }, "id": "SSA-248289", "initial_release_date": "2021-04-13T00:00:00Z", "revision_history": [ { "date": "2021-04-13T00:00:00Z", "legacy_version": "1.0", "number": "1", "summary": "Publication Date" }, { "date": "2021-11-09T00:00:00Z", "legacy_version": "1.1", "number": "2", "summary": "Added solution for Nucleus ReadyStart V3; consolidated list of products" }, { "date": "2024-02-13T00:00:00Z", "legacy_version": "1.2", "number": "3", "summary": "Renamed Capital VSTAR to Capital Embedded AR Classic; added fix and mitigation for Capital Embedded AR Classic; added CVSSv4.0 vector and score" } ], "status": "interim", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Capital Embedded AR Classic 431-422", "product_id": "1" } } ], "category": "product_name", "name": "Capital Embedded AR Classic 431-422" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV2303", "product": { "name": "Capital Embedded AR Classic R20-11", "product_id": "2" } } ], "category": "product_name", "name": "Capital Embedded AR Classic R20-11" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Nucleus NET", "product_id": "3" } } ], "category": "product_name", "name": "Nucleus NET" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV2017.02.4", "product": { "name": "Nucleus ReadyStart V3", "product_id": "4" } } ], "category": "product_name", "name": "Nucleus ReadyStart V3" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV4.1.0", "product": { "name": "Nucleus ReadyStart V4", "product_id": "5" } } ], "category": "product_name", "name": "Nucleus ReadyStart V4" }, { "branches": [ { "category": "product_version_range", "name": "All versions including affected IPv6 stack", "product": { "name": "Nucleus Source Code", "product_id": "6" } } ], "category": "product_name", "name": "Nucleus Source Code" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-25663", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.", "title": "Summary" } ], "product_status": { "known_affected": [ "1", "2", "3", "4", "5", "6" ] }, "remediations": [ { "category": "mitigation", "details": "Contact customer support or your local Nucleus Sales team for mitigation advice", "product_ids": [ "3" ] }, { "category": "mitigation", "details": "Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option", "product_ids": [ "1", "2" ] }, { "category": "mitigation", "details": "Update to the latest version of Nucleus ReadyStart V3 or V4", "product_ids": [ "3" ] }, { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "3" ] }, { "category": "none_available", "details": "Currently no fix is available", "product_ids": [ "1" ] }, { "category": "vendor_fix", "details": "Update to V2017.02.4 or later version", "product_ids": [ "4" ] }, { "category": "vendor_fix", "details": "Update to V2303 or later version", "product_ids": [ "2" ] }, { "category": "vendor_fix", "details": "Update to V4.1.0 or later version", "product_ids": [ "5" ] }, { "category": "vendor_fix", "details": "Contact customer support to receive patch and update information", "product_ids": [ "6" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "1", "2", "3", "4", "5", "6" ] } ], "title": "CVE-2021-25663" }, { "cve": "CVE-2021-25664", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "The function that processes the Hop-by-Hop extension header in IPv6 packets and its options lacks any checks against the length field of the header, allowing attackers to put the function into an infinite loop by supplying arbitrary length values.", "title": "Summary" } ], "product_status": { "known_affected": [ "1", "2", "3", "4", "5", "6" ] }, "remediations": [ { "category": "mitigation", "details": "Contact customer support or your local Nucleus Sales team for mitigation advice", "product_ids": [ "3" ] }, { "category": "mitigation", "details": "Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option", "product_ids": [ "1", "2" ] }, { "category": "mitigation", "details": "Update to the latest version of Nucleus ReadyStart V3 or V4", "product_ids": [ "3" ] }, { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "3" ] }, { "category": "none_available", "details": "Currently no fix is available", "product_ids": [ "1" ] }, { "category": "vendor_fix", "details": "Update to V2017.02.4 or later version", "product_ids": [ "4" ] }, { "category": "vendor_fix", "details": "Update to V2303 or later version", "product_ids": [ "2" ] }, { "category": "vendor_fix", "details": "Update to V4.1.0 or later version", "product_ids": [ "5" ] }, { "category": "vendor_fix", "details": "Contact customer support to receive patch and update information", "product_ids": [ "6" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "1", "2", "3", "4", "5", "6" ] } ], "title": "CVE-2021-25664" } ] }
ghsa-m3qf-xv59-6w6h
Vulnerability from github
8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
A vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All versions), Nucleus ReadyStart (All versions), Nucleus Source Code (versions including affected IPv6 stack), VSTAR (versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.
{ "affected": [], "aliases": [ "CVE-2021-25663" ], "database_specific": { "cwe_ids": [ "CWE-835" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2021-04-22T21:15:00Z", "severity": "HIGH" }, "details": "A vulnerability has been identified in Nucleus 4 (All versions \u003c V4.1.0), Nucleus NET (All versions), Nucleus ReadyStart (All versions), Nucleus Source Code (versions including affected IPv6 stack), VSTAR (versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.", "id": "GHSA-m3qf-xv59-6w6h", "modified": "2025-03-11T12:30:58Z", "published": "2022-05-24T17:48:17Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25663" }, { "type": "WEB", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" }, { "type": "WEB", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf" }, { "type": "WEB", "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "type": "CVSS_V4" } ] }
icsa-21-103-05
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "organization": "Siemens ProductCERT", "summary": "reporting these vulnerabilities to CISA." } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition.\n\nSiemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.", "title": "Summary" }, { "category": "general", "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", "title": "General Recommendations" }, { "category": "general", "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", "title": "Additional Resources" }, { "category": "legal_disclaimer", "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.", "title": "Terms of Use" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "other", "text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.", "title": "Advisory Conversion Disclaimer" }, { "category": "other", "text": "Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.", "title": "Recommended Practices" }, { "category": "general", "text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.", "title": "Recommended Practices" }, { "category": "general", "text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.", "title": "Recommended Practices" }, { "category": "general", "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.", "title": "Recommended Practices" } ], "publisher": { "category": "other", "contact_details": "central@cisa.dhs.gov", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - CSAF Version", "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-248289.json" }, { "category": "self", "summary": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - HTML Version", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" }, { "category": "self", "summary": "ICS Advisory ICSA-21-103-05 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-103-05.json" }, { "category": "self", "summary": "ICS Advisory ICSA-21-103-05 - Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-103-05" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/topics/industrial-control-systems" }, { "category": "external", "summary": "Recommended Practices", "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B" } ], "title": "Siemens Nucleus Products IPv6 Stack", "tracking": { "current_release_date": "2025-03-11T00:00:00.000000Z", "generator": { "date": "2025-03-06T09:03:00.000000Z", "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-21-103-05", "initial_release_date": "2021-04-13T00:00:00.000000Z", "revision_history": [ { "date": "2021-04-13T00:00:00.000000Z", "legacy_version": "1.0", "number": "1", "summary": "Publication Date" }, { "date": "2021-11-09T00:00:00.000000Z", "legacy_version": "1.1", "number": "2", "summary": "Added solution for Nucleus ReadyStart V3; consolidated list of products" }, { "date": "2024-02-13T00:00:00.000000Z", "legacy_version": "1.2", "number": "3", "summary": "Renamed Capital VSTAR to Capital Embedded AR Classic; added fix and mitigation for Capital Embedded AR Classic; added CVSSv4.0 vector and score" }, { "date": "2025-03-11T00:00:00.000000Z", "legacy_version": "1.3", "number": "4", "summary": "Updated remediation of Capital Embedded AR Classic 431-422 as no fix planned" } ], "status": "final", "version": "4" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Capital Embedded AR Classic 431-422", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "Capital Embedded AR Classic 431-422" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV2303", "product": { "name": "Capital Embedded AR Classic R20-11", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "Capital Embedded AR Classic R20-11" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Nucleus NET", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "Nucleus NET" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV2017.02.4", "product": { "name": "Nucleus ReadyStart V3", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "Nucleus ReadyStart V3" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV4.1.0", "product": { "name": "Nucleus ReadyStart V4", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "Nucleus ReadyStart V4" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Nucleus Source Code", "product_id": "CSAFPID-0006" } } ], "category": "product_name", "name": "Nucleus Source Code" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-25663", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ] }, "remediations": [ { "category": "mitigation", "details": "Contact customer support or your local Nucleus Sales team for mitigation advice", "product_ids": [ "CSAFPID-0003" ] }, { "category": "mitigation", "details": "Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Update to the latest version of Nucleus ReadyStart V3 or V4", "product_ids": [ "CSAFPID-0003" ] }, { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "CSAFPID-0001", "CSAFPID-0003" ] }, { "category": "vendor_fix", "details": "Update to V2017.02.4 or later version", "product_ids": [ "CSAFPID-0004" ] }, { "category": "vendor_fix", "details": "Update to V2303 or later version", "product_ids": [ "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Update to V4.1.0 or later version", "product_ids": [ "CSAFPID-0005" ] }, { "category": "vendor_fix", "details": "Contact customer support to receive patch and update information", "product_ids": [ "CSAFPID-0006" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ] } ], "title": "CVE-2021-25663" }, { "cve": "CVE-2021-25664", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "The function that processes the Hop-by-Hop extension header in IPv6 packets and its options lacks any checks against the length field of the header, allowing attackers to put the function into an infinite loop by supplying arbitrary length values.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ] }, "remediations": [ { "category": "mitigation", "details": "Contact customer support or your local Nucleus Sales team for mitigation advice", "product_ids": [ "CSAFPID-0003" ] }, { "category": "mitigation", "details": "Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Update to the latest version of Nucleus ReadyStart V3 or V4", "product_ids": [ "CSAFPID-0003" ] }, { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "CSAFPID-0001", "CSAFPID-0003" ] }, { "category": "vendor_fix", "details": "Update to V2017.02.4 or later version", "product_ids": [ "CSAFPID-0004" ] }, { "category": "vendor_fix", "details": "Update to V2303 or later version", "product_ids": [ "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Update to V4.1.0 or later version", "product_ids": [ "CSAFPID-0005" ] }, { "category": "vendor_fix", "details": "Contact customer support to receive patch and update information", "product_ids": [ "CSAFPID-0006" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ] } ], "title": "CVE-2021-25664" } ] }
ICSA-21-103-05
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "organization": "Siemens ProductCERT", "summary": "reporting these vulnerabilities to CISA." } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition.\n\nSiemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.", "title": "Summary" }, { "category": "general", "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", "title": "General Recommendations" }, { "category": "general", "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", "title": "Additional Resources" }, { "category": "legal_disclaimer", "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.", "title": "Terms of Use" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "other", "text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.", "title": "Advisory Conversion Disclaimer" }, { "category": "other", "text": "Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.", "title": "Recommended Practices" }, { "category": "general", "text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.", "title": "Recommended Practices" }, { "category": "general", "text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.", "title": "Recommended Practices" }, { "category": "general", "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.", "title": "Recommended Practices" } ], "publisher": { "category": "other", "contact_details": "central@cisa.dhs.gov", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - CSAF Version", "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-248289.json" }, { "category": "self", "summary": "SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - HTML Version", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" }, { "category": "self", "summary": "ICS Advisory ICSA-21-103-05 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-103-05.json" }, { "category": "self", "summary": "ICS Advisory ICSA-21-103-05 - Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-103-05" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/topics/industrial-control-systems" }, { "category": "external", "summary": "Recommended Practices", "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B" } ], "title": "Siemens Nucleus Products IPv6 Stack", "tracking": { "current_release_date": "2025-03-11T00:00:00.000000Z", "generator": { "date": "2025-03-06T09:03:00.000000Z", "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-21-103-05", "initial_release_date": "2021-04-13T00:00:00.000000Z", "revision_history": [ { "date": "2021-04-13T00:00:00.000000Z", "legacy_version": "1.0", "number": "1", "summary": "Publication Date" }, { "date": "2021-11-09T00:00:00.000000Z", "legacy_version": "1.1", "number": "2", "summary": "Added solution for Nucleus ReadyStart V3; consolidated list of products" }, { "date": "2024-02-13T00:00:00.000000Z", "legacy_version": "1.2", "number": "3", "summary": "Renamed Capital VSTAR to Capital Embedded AR Classic; added fix and mitigation for Capital Embedded AR Classic; added CVSSv4.0 vector and score" }, { "date": "2025-03-11T00:00:00.000000Z", "legacy_version": "1.3", "number": "4", "summary": "Updated remediation of Capital Embedded AR Classic 431-422 as no fix planned" } ], "status": "final", "version": "4" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Capital Embedded AR Classic 431-422", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "Capital Embedded AR Classic 431-422" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV2303", "product": { "name": "Capital Embedded AR Classic R20-11", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "Capital Embedded AR Classic R20-11" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Nucleus NET", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "Nucleus NET" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV2017.02.4", "product": { "name": "Nucleus ReadyStart V3", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "Nucleus ReadyStart V3" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV4.1.0", "product": { "name": "Nucleus ReadyStart V4", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "Nucleus ReadyStart V4" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Nucleus Source Code", "product_id": "CSAFPID-0006" } } ], "category": "product_name", "name": "Nucleus Source Code" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-25663", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ] }, "remediations": [ { "category": "mitigation", "details": "Contact customer support or your local Nucleus Sales team for mitigation advice", "product_ids": [ "CSAFPID-0003" ] }, { "category": "mitigation", "details": "Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Update to the latest version of Nucleus ReadyStart V3 or V4", "product_ids": [ "CSAFPID-0003" ] }, { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "CSAFPID-0001", "CSAFPID-0003" ] }, { "category": "vendor_fix", "details": "Update to V2017.02.4 or later version", "product_ids": [ "CSAFPID-0004" ] }, { "category": "vendor_fix", "details": "Update to V2303 or later version", "product_ids": [ "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Update to V4.1.0 or later version", "product_ids": [ "CSAFPID-0005" ] }, { "category": "vendor_fix", "details": "Contact customer support to receive patch and update information", "product_ids": [ "CSAFPID-0006" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ] } ], "title": "CVE-2021-25663" }, { "cve": "CVE-2021-25664", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "The function that processes the Hop-by-Hop extension header in IPv6 packets and its options lacks any checks against the length field of the header, allowing attackers to put the function into an infinite loop by supplying arbitrary length values.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ] }, "remediations": [ { "category": "mitigation", "details": "Contact customer support or your local Nucleus Sales team for mitigation advice", "product_ids": [ "CSAFPID-0003" ] }, { "category": "mitigation", "details": "Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Update to the latest version of Nucleus ReadyStart V3 or V4", "product_ids": [ "CSAFPID-0003" ] }, { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "CSAFPID-0001", "CSAFPID-0003" ] }, { "category": "vendor_fix", "details": "Update to V2017.02.4 or later version", "product_ids": [ "CSAFPID-0004" ] }, { "category": "vendor_fix", "details": "Update to V2303 or later version", "product_ids": [ "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Update to V4.1.0 or later version", "product_ids": [ "CSAFPID-0005" ] }, { "category": "vendor_fix", "details": "Contact customer support to receive patch and update information", "product_ids": [ "CSAFPID-0006" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ] } ], "title": "CVE-2021-25664" } ] }
wid-sec-w-2023-1986
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Nucleus Net ist der Netzwerk-Stack f\u00fcr das Nucleus RTOS Echtzeitbetriebssystem.\r\nNucleus RTOS ist ein Echtzeitbetriebssystem f\u00fcr Embedded Devices.\r\nAzure RTOS NetX ist ein TCP/IP IPv4 Embedded Network Stack, der f\u00fcr Embedded-, Echtzeit- und IoT-Anwendungen entwickelt wurde. \r\nVxWorks ist ein propriet\u00e4res Echtzeitbetriebssystem, das von Wind River Systems entwickelt wird.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens Nucleus Net, Siemens Nucleus RTOS, Microsoft Azure RTOS NetX und Wind River VxWorks ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuf\u00fchren oder einen Denial of Service zu verursachen.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-1986 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2023-1986.json" }, { "category": "self", "summary": "WID-SEC-2023-1986 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1986" }, { "category": "external", "summary": "Forescout Report vom 2021-04-15", "url": "https://www.forescout.com/company/resources/namewreck-breaking-and-fixing-dns-implementations/" }, { "category": "external", "summary": "Siemens Security Advisory by Siemens ProductCERT", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-185699.pdf" }, { "category": "external", "summary": "Siemens Security Advisory by Siemens ProductCERT", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf" }, { "category": "external", "summary": "Siemens Security Advisory SSA-180579 vom 2023-08-08", "url": "https://cert-portal.siemens.com/productcert/html/ssa-180579.html" }, { "category": "external", "summary": "Siemens Security Advisory SSA-248289 vom 2024-02-13", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" } ], "source_lang": "en-US", "title": "NAME:WRECK: Mehrere Schwachstellen in TCP/IP Stacks", "tracking": { "current_release_date": "2024-02-12T23:00:00.000+00:00", "generator": { "date": "2024-08-15T17:56:40.873+00:00", "engine": { "name": "BSI-WID", "version": "1.3.5" } }, "id": "WID-SEC-W-2023-1986", "initial_release_date": "2021-04-15T22:00:00.000+00:00", "revision_history": [ { "date": "2021-04-15T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2021-05-02T22:00:00.000+00:00", "number": "2", "summary": "CVE\u0027s erg\u00e4nzt" }, { "date": "2021-11-08T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Siemens aufgenommen" }, { "date": "2023-08-07T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von Siemens aufgenommen" }, { "date": "2024-02-12T23:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Siemens aufgenommen" } ], "status": "final", "version": "5" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Microsoft Azure RTOS NetX", "product": { "name": "Microsoft Azure RTOS NetX", "product_id": "T018910", "product_identification_helper": { "cpe": "cpe:/o:microsoft:azure_rtos_netx:-" } } } ], "category": "vendor", "name": "Microsoft" }, { "branches": [ { "category": "product_name", "name": "Siemens Nucleus Net", "product": { "name": "Siemens Nucleus Net", "product_id": "683157", "product_identification_helper": { "cpe": "cpe:/a:siemens:nucleus_net:-" } } }, { "category": "product_name", "name": "Siemens Nucleus RTOS", "product": { "name": "Siemens Nucleus RTOS", "product_id": "683163", "product_identification_helper": { "cpe": "cpe:/o:siemens:nucleus_rtos:-" } } } ], "category": "vendor", "name": "Siemens" }, { "branches": [ { "category": "product_name", "name": "Wind River VxWorks", "product": { "name": "Wind River VxWorks", "product_id": "T018911", "product_identification_helper": { "cpe": "cpe:/o:windriver:vxworks:-" } } } ], "category": "vendor", "name": "Wind River" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-20009", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2016-20009" }, { "cve": "CVE-2020-15795", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-15795" }, { "cve": "CVE-2020-27009", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27009" }, { "cve": "CVE-2020-27736", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27736" }, { "cve": "CVE-2020-27737", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27737" }, { "cve": "CVE-2020-27738", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27738" }, { "cve": "CVE-2021-25663", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-25663" }, { "cve": "CVE-2021-25664", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-25664" }, { "cve": "CVE-2021-25677", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-25677" }, { "cve": "CVE-2021-27393", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-27393" } ] }
WID-SEC-W-2023-1986
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Nucleus Net ist der Netzwerk-Stack f\u00fcr das Nucleus RTOS Echtzeitbetriebssystem.\r\nNucleus RTOS ist ein Echtzeitbetriebssystem f\u00fcr Embedded Devices.\r\nAzure RTOS NetX ist ein TCP/IP IPv4 Embedded Network Stack, der f\u00fcr Embedded-, Echtzeit- und IoT-Anwendungen entwickelt wurde. \r\nVxWorks ist ein propriet\u00e4res Echtzeitbetriebssystem, das von Wind River Systems entwickelt wird.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens Nucleus Net, Siemens Nucleus RTOS, Microsoft Azure RTOS NetX und Wind River VxWorks ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuf\u00fchren oder einen Denial of Service zu verursachen.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-1986 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2023-1986.json" }, { "category": "self", "summary": "WID-SEC-2023-1986 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1986" }, { "category": "external", "summary": "Forescout Report vom 2021-04-15", "url": "https://www.forescout.com/company/resources/namewreck-breaking-and-fixing-dns-implementations/" }, { "category": "external", "summary": "Siemens Security Advisory by Siemens ProductCERT", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-185699.pdf" }, { "category": "external", "summary": "Siemens Security Advisory by Siemens ProductCERT", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf" }, { "category": "external", "summary": "Siemens Security Advisory SSA-180579 vom 2023-08-08", "url": "https://cert-portal.siemens.com/productcert/html/ssa-180579.html" }, { "category": "external", "summary": "Siemens Security Advisory SSA-248289 vom 2024-02-13", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" } ], "source_lang": "en-US", "title": "NAME:WRECK: Mehrere Schwachstellen in TCP/IP Stacks", "tracking": { "current_release_date": "2024-02-12T23:00:00.000+00:00", "generator": { "date": "2024-08-15T17:56:40.873+00:00", "engine": { "name": "BSI-WID", "version": "1.3.5" } }, "id": "WID-SEC-W-2023-1986", "initial_release_date": "2021-04-15T22:00:00.000+00:00", "revision_history": [ { "date": "2021-04-15T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2021-05-02T22:00:00.000+00:00", "number": "2", "summary": "CVE\u0027s erg\u00e4nzt" }, { "date": "2021-11-08T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Siemens aufgenommen" }, { "date": "2023-08-07T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von Siemens aufgenommen" }, { "date": "2024-02-12T23:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Siemens aufgenommen" } ], "status": "final", "version": "5" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Microsoft Azure RTOS NetX", "product": { "name": "Microsoft Azure RTOS NetX", "product_id": "T018910", "product_identification_helper": { "cpe": "cpe:/o:microsoft:azure_rtos_netx:-" } } } ], "category": "vendor", "name": "Microsoft" }, { "branches": [ { "category": "product_name", "name": "Siemens Nucleus Net", "product": { "name": "Siemens Nucleus Net", "product_id": "683157", "product_identification_helper": { "cpe": "cpe:/a:siemens:nucleus_net:-" } } }, { "category": "product_name", "name": "Siemens Nucleus RTOS", "product": { "name": "Siemens Nucleus RTOS", "product_id": "683163", "product_identification_helper": { "cpe": "cpe:/o:siemens:nucleus_rtos:-" } } } ], "category": "vendor", "name": "Siemens" }, { "branches": [ { "category": "product_name", "name": "Wind River VxWorks", "product": { "name": "Wind River VxWorks", "product_id": "T018911", "product_identification_helper": { "cpe": "cpe:/o:windriver:vxworks:-" } } } ], "category": "vendor", "name": "Wind River" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-20009", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2016-20009" }, { "cve": "CVE-2020-15795", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-15795" }, { "cve": "CVE-2020-27009", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27009" }, { "cve": "CVE-2020-27736", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27736" }, { "cve": "CVE-2020-27737", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27737" }, { "cve": "CVE-2020-27738", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27738" }, { "cve": "CVE-2021-25663", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-25663" }, { "cve": "CVE-2021-25664", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-25664" }, { "cve": "CVE-2021-25677", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-25677" }, { "cve": "CVE-2021-27393", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-27393" } ] }
fkie_cve-2021-25663
Vulnerability from fkie_nvd
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vendor | Product | Version | |
---|---|---|---|
siemens | capital_vstar | - | |
siemens | nucleus_net | * | |
siemens | nucleus_readystart | * | |
siemens | nucleus_source_code | - | |
siemens | nucleus_readystart | * |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:siemens:capital_vstar:-:*:*:*:*:*:*:*", "matchCriteriaId": "EEBF34F7-F37A-4FD1-957E-B2E5DEE7A778", "vulnerable": true }, { "criteria": "cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*", "matchCriteriaId": "7A987CFB-4A41-4F82-8C7F-31DE8F0650DE", "vulnerable": true }, { "criteria": "cpe:2.3:a:siemens:nucleus_readystart:*:*:*:*:*:*:*:*", "matchCriteriaId": "7A5FA7B8-2F94-4762-ADBF-71C0F37231AB", "versionEndExcluding": "4.1.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*", "matchCriteriaId": "53A38C64-612A-4BC5-83D5-D3FA1C90E0F7", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:siemens:nucleus_readystart:*:*:*:*:*:*:*:*", "matchCriteriaId": "F768DEFE-CE6F-4210-B728-9C4CA2AF03FE", "versionEndExcluding": "2017.02.4", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions \u003c V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2017.02.4), Nucleus ReadyStart V4 (All versions \u003c V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values." }, { "lang": "es", "value": "Se ha identificado una vulnerabilidad en Capital VSTAR (Versiones que incluyen la pila IPv6 afectada), Nucleus NET (Todas las versiones), Nucleus ReadyStart V3 (Todas las versiones anteriores a V2017.02.4), Nucleus ReadyStart V4 (Todas las versiones anteriores a V4.1.0), Nucleus Source Code (Versiones que incluyen la pila IPv6 afectada). La funci\u00f3n que procesa las cabeceras de IPv6 no comprueba las longitudes de las opciones de las cabeceras de extensi\u00f3n, lo que permite a los atacantes poner esta funci\u00f3n en un bucle infinito con valores de longitud manipulados" } ], "id": "CVE-2021-25663", "lastModified": "2025-03-11T10:15:13.240", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "productcert@siemens.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Secondary" } ], "cvssMetricV40": [ { "cvssData": { "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED" }, "source": "productcert@siemens.com", "type": "Secondary" } ] }, "published": "2021-04-22T21:15:09.957", "references": [ { "source": "productcert@siemens.com", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" }, { "source": "productcert@siemens.com", "tags": [ "Vendor Advisory" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf" }, { "source": "productcert@siemens.com", "tags": [ "Third Party Advisory", "US Government Resource" ], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "US Government Resource" ], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05" } ], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-835" } ], "source": "productcert@siemens.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-835" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
gsd-2021-25663
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2021-25663", "description": "A vulnerability has been identified in Capital VSTAR (Versions including affected IPv6 stack), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2017.02.4), Nucleus ReadyStart V4 (All versions \u003c V4.1.0), Nucleus Source Code (Versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.", "id": "GSD-2021-25663" }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2021-25663" ], "details": "A vulnerability has been identified in Capital VSTAR (Versions including affected IPv6 stack), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2017.02.4), Nucleus ReadyStart V4 (All versions \u003c V4.1.0), Nucleus Source Code (Versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.", "id": "GSD-2021-25663", "modified": "2023-12-13T01:23:20.974967Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "productcert@siemens.com", "ID": "CVE-2021-25663", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Capital Embedded AR Classic 431-422", "version": { "version_data": [ { "version_affected": "\u003c", "version_name": "0", "version_value": "*" } ] } }, { "product_name": "Capital Embedded AR Classic R20-11", "version": { "version_data": [ { "version_affected": "\u003c", "version_name": "0", "version_value": "V2303" } ] } }, { "product_name": "Nucleus NET", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions" } ] } }, { "product_name": "Nucleus ReadyStart V3", "version": { "version_data": [ { "version_affected": "\u003c", "version_name": "0", "version_value": "V2017.02.4" } ] } }, { "product_name": "Nucleus ReadyStart V4", "version": { "version_data": [ { "version_affected": "\u003c", "version_name": "0", "version_value": "V4.1.0" } ] } }, { "product_name": "Nucleus Source Code", "version": { "version_data": [ { "version_affected": "\u003c", "version_name": "0", "version_value": "*" } ] } } ] }, "vendor_name": "Siemens" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions \u003c V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2017.02.4), Nucleus ReadyStart V4 (All versions \u003c V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values." } ] }, "impact": { "cvss": [ { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "cweId": "CWE-835", "lang": "eng", "value": "CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" } ] } ] }, "references": { "reference_data": [ { "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf", "refsource": "MISC", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf" }, { "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05", "refsource": "MISC", "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05" }, { "name": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html", "refsource": "MISC", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" } ] } }, "nvd.nist.gov": { "cve": { "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:siemens:capital_vstar:-:*:*:*:*:*:*:*", "matchCriteriaId": "EEBF34F7-F37A-4FD1-957E-B2E5DEE7A778", "vulnerable": true }, { "criteria": "cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*", "matchCriteriaId": "7A987CFB-4A41-4F82-8C7F-31DE8F0650DE", "vulnerable": true }, { "criteria": "cpe:2.3:a:siemens:nucleus_readystart:*:*:*:*:*:*:*:*", "matchCriteriaId": "7A5FA7B8-2F94-4762-ADBF-71C0F37231AB", "versionEndExcluding": "4.1.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*", "matchCriteriaId": "53A38C64-612A-4BC5-83D5-D3FA1C90E0F7", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:siemens:nucleus_readystart:*:*:*:*:*:*:*:*", "matchCriteriaId": "F768DEFE-CE6F-4210-B728-9C4CA2AF03FE", "versionEndExcluding": "2017.02.4", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "descriptions": [ { "lang": "en", "value": "A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions \u003c V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2017.02.4), Nucleus ReadyStart V4 (All versions \u003c V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values." }, { "lang": "es", "value": "Se ha identificado una vulnerabilidad en Capital VSTAR (Versiones que incluyen la pila IPv6 afectada), Nucleus NET (Todas las versiones), Nucleus ReadyStart V3 (Todas las versiones anteriores a V2017.02.4), Nucleus ReadyStart V4 (Todas las versiones anteriores a V4.1.0), Nucleus Source Code (Versiones que incluyen la pila IPv6 afectada). La funci\u00f3n que procesa las cabeceras de IPv6 no comprueba las longitudes de las opciones de las cabeceras de extensi\u00f3n, lo que permite a los atacantes poner esta funci\u00f3n en un bucle infinito con valores de longitud manipulados" } ], "id": "CVE-2021-25663", "lastModified": "2024-02-13T09:15:43.143", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "productcert@siemens.com", "type": "Primary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Secondary" } ] }, "published": "2021-04-22T21:15:09.957", "references": [ { "source": "productcert@siemens.com", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" }, { "source": "productcert@siemens.com", "tags": [ "Vendor Advisory" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf" }, { "source": "productcert@siemens.com", "tags": [ "Third Party Advisory", "US Government Resource" ], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05" } ], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-835" } ], "source": "nvd@nist.gov", "type": "Primary" }, { "description": [ { "lang": "en", "value": "CWE-835" } ], "source": "productcert@siemens.com", "type": "Secondary" } ] } } } }
CERTFR-2021-AVI-854
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneVendor | Product | Description | ||
---|---|---|---|---|
Siemens | N/A | Capital VSTAR versions incluant les modules DNS | ||
Siemens | N/A | Nucleus Source Code toutes versions | ||
Siemens | N/A | Mendix Applications using Mendix 9 toutes versions antérieures à V9.6.2 | ||
Siemens | N/A | Nucleus NET toutes versions | ||
Siemens | N/A | SIMATIC WinCC V15 toutes versions | ||
Siemens | N/A | SIMATIC WinCC V17 toutes versions | ||
Siemens | N/A | SIMATIC WinCC OA V3.18 toutes versions | ||
Siemens | N/A | NX 1980 Series toutes versions antérieures à V1984 | ||
Siemens | N/A | APOGEE MEC (PPC) (BACnet) toutes versions | ||
Siemens | N/A | APOGEE PXC Compact (P2 Ethernet) toutes versions | ||
Siemens | N/A | SIMATIC WinCC V7.5 toutes versions antérieures à V7.5 SP2 Update 5 | ||
Siemens | N/A | SIMATIC WinCC OA V3.17 toutes versions | ||
Siemens | N/A | Climatix POL909 (AWM module) toutes versions antérieures à V11.34 | ||
Siemens | N/A | SCALANCE W1750D toutes versions antérieures à V8.7.1.3 | ||
Siemens | N/A | SIMATIC PCS 7 V9.0 toutes versions | ||
Siemens | N/A | Siveillance Video DLNA Server 2021 R1 | ||
Siemens | N/A | SIMATIC PCS 7 V9.1 toutes versions | ||
Siemens | N/A | Mendix Applications using Mendix 7 toutes versions antérieures à V7.23.26 | ||
Siemens | N/A | SIMATIC WinCC V7.4 toutes versions | ||
Siemens | N/A | APOGEE PXC Modular (BACnet) toutes versions | ||
Siemens | N/A | Nucleus Source Code versions incluant les modules DNS | ||
Siemens | N/A | SIMATIC WinCC V16 toutes versions | ||
Siemens | N/A | SIMATIC Information Server toutes versions >= V2019 SP1 | ||
Siemens | N/A | SICAM 230 toutes versions | ||
Siemens | N/A | Nucleus ReadyStart V4 toutes versions antérieures à V4.1.1 | ||
Siemens | N/A | Mendix Applications using Mendix 8 toutes versions antérieures à V8.18.13 | ||
Siemens | N/A | APOGEE PXC Modular (P2 Ethernet) toutes versions | ||
Siemens | N/A | Nucleus ReadyStart V3 toutes versions antérieures à V2017.02.4 | ||
Siemens | N/A | SIMATIC RTLS Locating Manager toutes versions antérieures à V2.12 | ||
Siemens | N/A | Siveillance Video DLNA Server 2020 R1, 2020 R2, 2020 R3 | ||
Siemens | N/A | Capital VSTAR toutes versions | ||
Siemens | N/A | Siveillance Video DLNA Server 2019 R1, 2019 R2, 2019 R3 | ||
Siemens | N/A | Nucleus ReadyStart V3 toutes versions antérieures à V2013.08 | ||
Siemens | N/A | APOGEE MEC (PPC) (P2 Ethernet) toutes versions | ||
Siemens | N/A | PSS(R)ODMS V12 toutes versions antérieures à V12.2.6.1 | ||
Siemens | N/A | Nucleus ReadyStart V3 toutes versions antérieures à V2012.12 | ||
Siemens | N/A | SENTRON powermanager V3 toutes versions | ||
Siemens | N/A | APOGEE PXC Compact (BACnet) toutes versions | ||
Siemens | N/A | TALON TC Compact (BACnet) toutes versions | ||
Siemens | N/A | NX 1980 Series toutes versions antérieures à V1988 | ||
Siemens | N/A | PSS(R)E V34 toutes versions antérieures à V34.9.1 | ||
Siemens | N/A | APOGEE MBC (PPC) (P2 Ethernet) toutes versions | ||
Siemens | N/A | NX 1953 Series toutes versions antérieures à V1973.3700 | ||
Siemens | N/A | APOGEE MBC (PPC) (BACnet) toutes versions | ||
Siemens | N/A | PSS(R)E V35 toutes versions antérieures à V35.3.2 | ||
Siemens | N/A | SIMATIC PCS 7 V8.2 toutes versions | ||
Siemens | N/A | TALON TC Modular (BACnet) toutes versions |
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "Capital VSTAR versions incluant les modules DNS", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Nucleus Source Code toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Mendix Applications using Mendix 9 toutes versions ant\u00e9rieures \u00e0 V9.6.2", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Nucleus NET toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC WinCC V15 toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC WinCC V17 toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC WinCC OA V3.18 toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "NX 1980 Series toutes versions ant\u00e9rieures \u00e0 V1984", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "APOGEE MEC (PPC) (BACnet) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "APOGEE PXC Compact (P2 Ethernet) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC WinCC V7.5 toutes versions ant\u00e9rieures \u00e0 V7.5 SP2 Update 5", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC WinCC OA V3.17 toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Climatix POL909 (AWM module) toutes versions ant\u00e9rieures \u00e0 V11.34", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SCALANCE W1750D toutes versions ant\u00e9rieures \u00e0 V8.7.1.3", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC PCS 7 V9.0 toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Siveillance Video DLNA Server 2021 R1", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC PCS 7 V9.1 toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Mendix Applications using Mendix 7 toutes versions ant\u00e9rieures \u00e0 V7.23.26", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC WinCC V7.4 toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "APOGEE PXC Modular (BACnet) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Nucleus Source Code versions incluant les modules DNS", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC WinCC V16 toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC Information Server toutes versions \u003e= V2019 SP1", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SICAM 230 toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Nucleus ReadyStart V4 toutes versions ant\u00e9rieures \u00e0 V4.1.1", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Mendix Applications using Mendix 8 toutes versions ant\u00e9rieures \u00e0 V8.18.13", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "APOGEE PXC Modular (P2 Ethernet) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Nucleus ReadyStart V3 toutes versions ant\u00e9rieures \u00e0 V2017.02.4", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC RTLS Locating Manager toutes versions ant\u00e9rieures \u00e0 V2.12", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Siveillance Video DLNA Server 2020 R1, 2020 R2, 2020 R3", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Capital VSTAR toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Siveillance Video DLNA Server 2019 R1, 2019 R2, 2019 R3", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Nucleus ReadyStart V3 toutes versions ant\u00e9rieures \u00e0 V2013.08", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "APOGEE MEC (PPC) (P2 Ethernet) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "PSS(R)ODMS V12 toutes versions ant\u00e9rieures \u00e0 V12.2.6.1", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Nucleus ReadyStart V3 toutes versions ant\u00e9rieures \u00e0 V2012.12", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SENTRON powermanager V3 toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "APOGEE PXC Compact (BACnet) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "TALON TC Compact (BACnet) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "NX 1980 Series toutes versions ant\u00e9rieures \u00e0 V1988", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "PSS(R)E V34 toutes versions ant\u00e9rieures \u00e0 V34.9.1", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "APOGEE MBC (PPC) (P2 Ethernet) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "NX 1953 Series toutes versions ant\u00e9rieures \u00e0 V1973.3700", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "APOGEE MBC (PPC) (BACnet) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "PSS(R)E V35 toutes versions ant\u00e9rieures \u00e0 V35.3.2", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC PCS 7 V8.2 toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "TALON TC Modular (BACnet) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } } ], "affected_systems_content": null, "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n", "cves": [ { "name": "CVE-2020-27009", "url": "https://www.cve.org/CVERecord?id=CVE-2020-27009" }, { "name": "CVE-2021-31881", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31881" }, { "name": "CVE-2020-28388", "url": "https://www.cve.org/CVERecord?id=CVE-2020-28388" }, { "name": "CVE-2021-42026", "url": "https://www.cve.org/CVERecord?id=CVE-2021-42026" }, { "name": "CVE-2021-37734", "url": "https://www.cve.org/CVERecord?id=CVE-2021-37734" }, { "name": "CVE-2021-42025", "url": "https://www.cve.org/CVERecord?id=CVE-2021-42025" }, { "name": "CVE-2021-37732", "url": "https://www.cve.org/CVERecord?id=CVE-2021-37732" }, { "name": "CVE-2021-31888", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31888" }, { "name": "CVE-2020-27736", "url": "https://www.cve.org/CVERecord?id=CVE-2020-27736" }, { "name": "CVE-2021-31885", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31885" }, { "name": "CVE-2021-31887", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31887" }, { "name": "CVE-2020-10053", "url": "https://www.cve.org/CVERecord?id=CVE-2020-10053" }, { "name": "CVE-2021-37735", "url": "https://www.cve.org/CVERecord?id=CVE-2021-37735" }, { "name": "CVE-2021-41533", "url": "https://www.cve.org/CVERecord?id=CVE-2021-41533" }, { "name": "CVE-2021-25663", "url": "https://www.cve.org/CVERecord?id=CVE-2021-25663" }, { "name": "CVE-2021-31884", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31884" }, { "name": "CVE-2021-42015", "url": "https://www.cve.org/CVERecord?id=CVE-2021-42015" }, { "name": "CVE-2021-40366", "url": "https://www.cve.org/CVERecord?id=CVE-2021-40366" }, { "name": "CVE-2020-15795", "url": "https://www.cve.org/CVERecord?id=CVE-2020-15795" }, { "name": "CVE-2021-31882", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31882" }, { "name": "CVE-2021-25664", "url": "https://www.cve.org/CVERecord?id=CVE-2021-25664" }, { "name": "CVE-2021-41057", "url": "https://www.cve.org/CVERecord?id=CVE-2021-41057" }, { "name": "CVE-2021-37207", "url": "https://www.cve.org/CVERecord?id=CVE-2021-37207" }, { "name": "CVE-2021-40358", "url": "https://www.cve.org/CVERecord?id=CVE-2021-40358" }, { "name": "CVE-2020-10052", "url": "https://www.cve.org/CVERecord?id=CVE-2020-10052" }, { "name": "CVE-2021-37726", "url": "https://www.cve.org/CVERecord?id=CVE-2021-37726" }, { "name": "CVE-2020-10054", "url": "https://www.cve.org/CVERecord?id=CVE-2020-10054" }, { "name": "CVE-2021-41535", "url": "https://www.cve.org/CVERecord?id=CVE-2021-41535" }, { "name": "CVE-2021-37727", "url": "https://www.cve.org/CVERecord?id=CVE-2021-37727" }, { "name": "CVE-2021-27393", "url": "https://www.cve.org/CVERecord?id=CVE-2021-27393" }, { "name": "CVE-2021-31346", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31346" }, { "name": "CVE-2021-40364", "url": "https://www.cve.org/CVERecord?id=CVE-2021-40364" }, { "name": "CVE-2020-27738", "url": "https://www.cve.org/CVERecord?id=CVE-2020-27738" }, { "name": "CVE-2021-31889", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31889" }, { "name": "CVE-2021-42021", "url": "https://www.cve.org/CVERecord?id=CVE-2021-42021" }, { "name": "CVE-2021-31883", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31883" }, { "name": "CVE-2021-41538", "url": "https://www.cve.org/CVERecord?id=CVE-2021-41538" }, { "name": "CVE-2021-40359", "url": "https://www.cve.org/CVERecord?id=CVE-2021-40359" }, { "name": "CVE-2021-31886", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31886" }, { "name": "CVE-2021-41534", "url": "https://www.cve.org/CVERecord?id=CVE-2021-41534" }, { "name": "CVE-2021-31890", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31890" }, { "name": "CVE-2021-37730", "url": "https://www.cve.org/CVERecord?id=CVE-2021-37730" }, { "name": "CVE-2021-31345", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31345" }, { "name": "CVE-2020-27737", "url": "https://www.cve.org/CVERecord?id=CVE-2020-27737" }, { "name": "CVE-2021-31344", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31344" }, { "name": "CVE-2021-25677", "url": "https://www.cve.org/CVERecord?id=CVE-2021-25677" } ], "initial_release_date": "2021-11-09T00:00:00", "last_revision_date": "2021-11-09T00:00:00", "links": [], "reference": "CERTFR-2021-AVI-854", "revisions": [ { "description": "Version initiale", "revision_date": "2021-11-09T00:00:00.000000" } ], "risks": [ { "description": "D\u00e9ni de service \u00e0 distance" }, { "description": "Ex\u00e9cution de code arbitraire \u00e0 distance" }, { "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es" }, { "description": "Contournement de la politique de s\u00e9curit\u00e9" }, { "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n", "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens", "vendor_advisories": [ { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-248289 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-703715 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-703715.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-840188 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-840188.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-362164 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-362164.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-044112 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-328042 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-328042.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-917476 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-114589 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-201384 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-537983 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-537983.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-779699 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-779699.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-580693 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-580693.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-185699 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-185699.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-740908 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-740908.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-145157 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-145157.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-338732 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-338732.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-755517 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-755517.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-705111 du 9 novembre 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf" } ] }
CERTFR-2021-AVI-255
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneVendor | Product | Description | ||
---|---|---|---|---|
Siemens | N/A | LOGO! Soft Comfort toutes versions | ||
Siemens | N/A | Siveillance Video Open Network Bridge:2019 R2 | ||
Siemens | N/A | Solid Edge SE2021 versions antérieures à SE2021MP4 | ||
Siemens | N/A | SIMATIC NET CP 443-1 Advanced (incl. SIPLUSvariants) versions antérieures à V3.2.9 | ||
Siemens | N/A | Siveillance Video Open Network Bridge:2019 R3 | ||
Siemens | N/A | Nucleus NET versions antérieures à 5.2 | ||
Siemens | N/A | TIM 3V-IE / TIM 3V-IE Advanced (incl. SIPLUSNET variants) versions antérieures à V2.6.0 | ||
Siemens | N/A | SiNVR/SiVMS Video Server toutes versions | ||
Siemens | N/A | Nucleus RTOS versions contenant le module DNS affecté | ||
Siemens | N/A | SIMATIC NET CP 343-1 Advanced (incl. SIPLUSvariants) versions antérieures à V3.0.44 | ||
Siemens | N/A | Solid Edge SE2020 toutes versions | ||
Siemens | N/A | SIMATIC NET CP 343-1 Lean (incl. SIPLUS vari-ants) versions antérieures à V3.1.1 | ||
Siemens | N/A | SIMATIC NET CP 443-5 Basic (incl. SIPLUS vari-ants) toutes versions | ||
Siemens | N/A | Opcenter Quality versions antérieures à 12.2 | ||
Siemens | N/A | Siveillance Video Open Network Bridge:2019 R1 | ||
Siemens | N/A | SIMATIC NET CP 443-5 Extended toutes versions | ||
Siemens | N/A | VSTAR versions contenant le module DNS affecté | ||
Siemens | N/A | Control Center Server (CCS) toutes versions | ||
Siemens | N/A | TIM 4R-IE (incl. SIPLUS NET variants) toutes versions | ||
Siemens | N/A | Siveillance Video Open Network Bridge:2020 R1 | ||
Siemens | N/A | SINEMA Remote Connect Server versions antérieures à 3.0 | ||
Siemens | N/A | Siveillance Video Open Network Bridge:2020 R2 | ||
Siemens | N/A | SIMATIC NET CP 343-1 Standard (incl. SIPLUSvariants) versions antérieures à V3.1.1 | ||
Siemens | N/A | SIMATIC NET CP 443-1 Standard (incl. SIPLUSvariants) versions antérieures à V3.2.9 | ||
Siemens | N/A | SIMATIC NET CP 342-5 (incl. SIPLUS variants) toutes versions | ||
Siemens | N/A | Siveillance Video Open Network Bridge:2018 R2 | ||
Siemens | N/A | Nucleus ReadyStart toutes versions | ||
Siemens | N/A | Nucleus 4 versions antérieures à 4.1.0 | ||
Siemens | N/A | Siveillance Video Open Network Bridge:2018 R3 | ||
Siemens | N/A | QMS Automotive versions antérieures à 12.30 | ||
Siemens | N/A | Tecnomatix RobotExpert versions antérieures à 16.1 | ||
Siemens | N/A | TIM 3V-IE DNP3 (incl. SIPLUS NET variants) versions antérieures à V3.1.0 | ||
Siemens | N/A | Siveillance Video Open Network Bridge:2020 R3 | ||
Siemens | N/A | Nucleus Source Code versions contenant le module DNS affecté | ||
Siemens | N/A | TIM 4R-IE DNP3 (incl. SIPLUS NET variants) toutes versions | ||
Siemens | N/A | SIMOTICS CONNECT 400 toutes verions |
Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "LOGO! Soft Comfort toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Siveillance Video Open Network Bridge:2019 R2", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Solid Edge SE2021 versions ant\u00e9rieures \u00e0 SE2021MP4", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC NET CP 443-1 Advanced (incl. SIPLUSvariants) versions ant\u00e9rieures \u00e0 V3.2.9", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Siveillance Video Open Network Bridge:2019 R3", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Nucleus NET versions ant\u00e9rieures \u00e0 5.2", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "TIM 3V-IE / TIM 3V-IE Advanced (incl. SIPLUSNET variants) versions ant\u00e9rieures \u00e0 V2.6.0", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SiNVR/SiVMS Video Server toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Nucleus RTOS versions contenant le module DNS affect\u00e9", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC NET CP 343-1 Advanced (incl. SIPLUSvariants) versions ant\u00e9rieures \u00e0 V3.0.44", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Solid Edge SE2020 toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC NET CP 343-1 Lean (incl. SIPLUS vari-ants) versions ant\u00e9rieures \u00e0 V3.1.1", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC NET CP 443-5 Basic (incl. SIPLUS vari-ants) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Opcenter Quality versions ant\u00e9rieures \u00e0 12.2", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Siveillance Video Open Network Bridge:2019 R1", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC NET CP 443-5 Extended toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "VSTAR versions contenant le module DNS affect\u00e9", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Control Center Server (CCS) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "TIM 4R-IE (incl. SIPLUS NET variants) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Siveillance Video Open Network Bridge:2020 R1", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SINEMA Remote Connect Server versions ant\u00e9rieures \u00e0 3.0", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Siveillance Video Open Network Bridge:2020 R2", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC NET CP 343-1 Standard (incl. SIPLUSvariants) versions ant\u00e9rieures \u00e0 V3.1.1", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC NET CP 443-1 Standard (incl. SIPLUSvariants) versions ant\u00e9rieures \u00e0 V3.2.9", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMATIC NET CP 342-5 (incl. SIPLUS variants) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Siveillance Video Open Network Bridge:2018 R2", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Nucleus ReadyStart toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Nucleus 4 versions ant\u00e9rieures \u00e0 4.1.0", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Siveillance Video Open Network Bridge:2018 R3", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "QMS Automotive versions ant\u00e9rieures \u00e0 12.30", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Tecnomatix RobotExpert versions ant\u00e9rieures \u00e0 16.1", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "TIM 3V-IE DNP3 (incl. SIPLUS NET variants) versions ant\u00e9rieures \u00e0 V3.1.0", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Siveillance Video Open Network Bridge:2020 R3", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "Nucleus Source Code versions contenant le module DNS affect\u00e9", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "TIM 4R-IE DNP3 (incl. SIPLUS NET variants) toutes versions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } }, { "description": "SIMOTICS CONNECT 400 toutes verions", "product": { "name": "N/A", "vendor": { "name": "Siemens", "scada": true } } } ], "affected_systems_content": null, "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n", "cves": [ { "name": "CVE-2020-27009", "url": "https://www.cve.org/CVERecord?id=CVE-2020-27009" }, { "name": "CVE-2015-7855", "url": "https://www.cve.org/CVERecord?id=CVE-2015-7855" }, { "name": "CVE-2019-18339", "url": "https://www.cve.org/CVERecord?id=CVE-2019-18339" }, { "name": "CVE-2016-1547", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1547" }, { "name": "CVE-2015-7973", "url": "https://www.cve.org/CVERecord?id=CVE-2015-7973" }, { "name": "CVE-2016-4953", "url": "https://www.cve.org/CVERecord?id=CVE-2016-4953" }, { "name": "CVE-2021-27389", "url": "https://www.cve.org/CVERecord?id=CVE-2021-27389" }, { "name": "CVE-2021-27382", "url": "https://www.cve.org/CVERecord?id=CVE-2021-27382" }, { "name": "CVE-2020-27736", "url": "https://www.cve.org/CVERecord?id=CVE-2020-27736" }, { "name": "CVE-2021-27380", "url": "https://www.cve.org/CVERecord?id=CVE-2021-27380" }, { "name": "CVE-2015-5219", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5219" }, { "name": "CVE-2016-1550", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1550" }, { "name": "CVE-2015-7977", "url": "https://www.cve.org/CVERecord?id=CVE-2015-7977" }, { "name": "CVE-2015-7705", "url": "https://www.cve.org/CVERecord?id=CVE-2015-7705" }, { "name": "CVE-2021-27392", "url": "https://www.cve.org/CVERecord?id=CVE-2021-27392" }, { "name": "CVE-2019-19956", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19956" }, { "name": "CVE-2021-25663", "url": "https://www.cve.org/CVERecord?id=CVE-2021-25663" }, { "name": "CVE-2020-15795", "url": "https://www.cve.org/CVERecord?id=CVE-2020-15795" }, { "name": "CVE-2015-8138", "url": "https://www.cve.org/CVERecord?id=CVE-2015-8138" }, { "name": "CVE-2016-4954", "url": "https://www.cve.org/CVERecord?id=CVE-2016-4954" }, { "name": "CVE-2021-25664", "url": "https://www.cve.org/CVERecord?id=CVE-2021-25664" }, { "name": "CVE-2020-25243", "url": "https://www.cve.org/CVERecord?id=CVE-2020-25243" }, { "name": "CVE-2015-7974", "url": "https://www.cve.org/CVERecord?id=CVE-2015-7974" }, { "name": "CVE-2015-8214", "url": "https://www.cve.org/CVERecord?id=CVE-2015-8214" }, { "name": "CVE-2019-19299", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19299" }, { "name": "CVE-2020-28385", "url": "https://www.cve.org/CVERecord?id=CVE-2020-28385" }, { "name": "CVE-2021-25678", "url": "https://www.cve.org/CVERecord?id=CVE-2021-25678" }, { "name": "CVE-2020-7595", "url": "https://www.cve.org/CVERecord?id=CVE-2020-7595" }, { "name": "CVE-2021-27393", "url": "https://www.cve.org/CVERecord?id=CVE-2021-27393" }, { "name": "CVE-2020-25244", "url": "https://www.cve.org/CVERecord?id=CVE-2020-25244" }, { "name": "CVE-2019-18340", "url": "https://www.cve.org/CVERecord?id=CVE-2019-18340" }, { "name": "CVE-2021-25670", "url": "https://www.cve.org/CVERecord?id=CVE-2021-25670" }, { "name": "CVE-2015-7979", "url": "https://www.cve.org/CVERecord?id=CVE-2015-7979" }, { "name": "CVE-2015-7871", "url": "https://www.cve.org/CVERecord?id=CVE-2015-7871" }, { "name": "CVE-2020-27738", "url": "https://www.cve.org/CVERecord?id=CVE-2020-27738" }, { "name": "CVE-2019-19298", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19298" }, { "name": "CVE-2020-26997", "url": "https://www.cve.org/CVERecord?id=CVE-2020-26997" }, { "name": "CVE-2019-19291", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19291" }, { "name": "CVE-2020-27737", "url": "https://www.cve.org/CVERecord?id=CVE-2020-27737" }, { "name": "CVE-2019-19297", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19297" }, { "name": "CVE-2016-1548", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1548" }, { "name": "CVE-2021-25677", "url": "https://www.cve.org/CVERecord?id=CVE-2021-25677" }, { "name": "CVE-2019-19296", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19296" } ], "initial_release_date": "2021-04-14T00:00:00", "last_revision_date": "2021-04-14T00:00:00", "links": [], "reference": "CERTFR-2021-AVI-255", "revisions": [ { "description": "Version initiale", "revision_date": "2021-04-14T00:00:00.000000" } ], "risks": [ { "description": "Ex\u00e9cution de code arbitraire" }, { "description": "\u00c9l\u00e9vation de privil\u00e8ges" }, { "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es" }, { "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es" }, { "description": "D\u00e9ni de service" }, { "description": "Contournement de la politique de s\u00e9curit\u00e9" }, { "description": "Injection de code indirecte \u00e0 distance (XSS)" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service et un\ncontournement de la politique de s\u00e9curit\u00e9.\n", "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens", "vendor_advisories": [ { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-788287 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-788287.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-248289 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-853866 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-853866.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-185699 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-185699.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-983300 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-983300.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-844761 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-163226 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-163226.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-763427 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-763427.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-497656 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-761617 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-669158 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-669158.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-574442 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-705111 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-292794 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf" }, { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-761844 du 13 avril 2021", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf" } ] }
cnvd-2021-28697
Vulnerability from cnvd
用户可参考如下供应商提供的安全公告获得补丁信息: https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf
Name | ['Siemens VSTAR', 'Siemens Nucleus Source Code', 'Siemens Nucleus NET', 'Siemens Nucleus ReadyStart', 'Siemens Nucleus 4 < V4.1.0'] |
---|
{ "cves": { "cve": { "cveNumber": "CVE-2021-25663" } }, "description": "Nucleus NET\u6a21\u5757\u5305\u542b\u4e86\u4e00\u7cfb\u5217\u7b26\u5408\u6807\u51c6\u7684\u7f51\u7edc\u548c\u901a\u4fe1\u534f\u8bae\u3001\u9a71\u52a8\u7a0b\u5e8f\u548c\u5b9e\u7528\u7a0b\u5e8f\uff0c\u4ee5\u5728\u4efb\u4f55\u5d4c\u5165\u5f0f\u8bbe\u5907\u4e2d\u63d0\u4f9b\u5168\u529f\u80fd\u7684\u7f51\u7edc\u652f\u6301\u3002Nucleus RTOS\u63d0\u4f9b\u4e86\u4e00\u4e2a\u9ad8\u5ea6\u53ef\u6269\u5c55\u7684\u57fa\u4e8e\u5fae\u5185\u6838\u7684\u5b9e\u65f6\u64cd\u4f5c\u7cfb\u7edf\uff0c\u8be5\u7cfb\u7edf\u8bbe\u8ba1\u7528\u4e8e\u822a\u5929\u3001\u5de5\u4e1a\u548c\u533b\u7597\u5e94\u7528\u8303\u56f4\u5185\u7684\u7cfb\u7edf\u7684\u53ef\u6269\u5c55\u6027\u548c\u53ef\u9760\u6027\u3002VSTAR\u662f\u4e00\u4e2a\u5b8c\u6574\u7684\u57fa\u4e8eAUTOSAR 4\u7684ECU\u89e3\u51b3\u65b9\u6848\uff0c\u4e3a\u53ca\u65f6\u90e8\u7f72\u4ea7\u54c1\u63d0\u4f9b\u5de5\u5177\u548c\u5d4c\u5165\u5f0f\u8f6f\u4ef6\u3002Nucleus ReadyStart\u662f\u4e00\u4e2a\u5177\u6709\u96c6\u6210\u8f6f\u4ef6IP\u3001\u5de5\u5177\u548c\u670d\u52a1\u7684\u5e73\u53f0\u3002\n\nSiemens Nucleus\u4ea7\u54c1\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u5904\u7406IPv6\u6807\u5934\u7684\u51fd\u6570\u4e0d\u68c0\u67e5\u6269\u5c55\u5934\u9009\u9879\u7684\u957f\u5ea6\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5c06\u6b64\u51fd\u6570\u653e\u5165\u7f16\u5236\u957f\u5ea6\u503c\u7684\u65e0\u9650\u5faa\u73af\u4e2d\u3002", "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf", "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e", "number": "CNVD-2021-28697", "openTime": "2021-04-15", "patchDescription": "Nucleus NET\u6a21\u5757\u5305\u542b\u4e86\u4e00\u7cfb\u5217\u7b26\u5408\u6807\u51c6\u7684\u7f51\u7edc\u548c\u901a\u4fe1\u534f\u8bae\u3001\u9a71\u52a8\u7a0b\u5e8f\u548c\u5b9e\u7528\u7a0b\u5e8f\uff0c\u4ee5\u5728\u4efb\u4f55\u5d4c\u5165\u5f0f\u8bbe\u5907\u4e2d\u63d0\u4f9b\u5168\u529f\u80fd\u7684\u7f51\u7edc\u652f\u6301\u3002Nucleus RTOS\u63d0\u4f9b\u4e86\u4e00\u4e2a\u9ad8\u5ea6\u53ef\u6269\u5c55\u7684\u57fa\u4e8e\u5fae\u5185\u6838\u7684\u5b9e\u65f6\u64cd\u4f5c\u7cfb\u7edf\uff0c\u8be5\u7cfb\u7edf\u8bbe\u8ba1\u7528\u4e8e\u822a\u5929\u3001\u5de5\u4e1a\u548c\u533b\u7597\u5e94\u7528\u8303\u56f4\u5185\u7684\u7cfb\u7edf\u7684\u53ef\u6269\u5c55\u6027\u548c\u53ef\u9760\u6027\u3002VSTAR\u662f\u4e00\u4e2a\u5b8c\u6574\u7684\u57fa\u4e8eAUTOSAR 4\u7684ECU\u89e3\u51b3\u65b9\u6848\uff0c\u4e3a\u53ca\u65f6\u90e8\u7f72\u4ea7\u54c1\u63d0\u4f9b\u5de5\u5177\u548c\u5d4c\u5165\u5f0f\u8f6f\u4ef6\u3002Nucleus ReadyStart\u662f\u4e00\u4e2a\u5177\u6709\u96c6\u6210\u8f6f\u4ef6IP\u3001\u5de5\u5177\u548c\u670d\u52a1\u7684\u5e73\u53f0\u3002\r\n\r\nSiemens Nucleus\u4ea7\u54c1\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u5904\u7406IPv6\u6807\u5934\u7684\u51fd\u6570\u4e0d\u68c0\u67e5\u6269\u5c55\u5934\u9009\u9879\u7684\u957f\u5ea6\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5c06\u6b64\u51fd\u6570\u653e\u5165\u7f16\u5236\u957f\u5ea6\u503c\u7684\u65e0\u9650\u5faa\u73af\u4e2d\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002", "patchName": "Siemens Nucleus\u4ea7\u54c1IPv6\u5806\u6808\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01", "products": { "product": [ "Siemens VSTAR", "Siemens Nucleus Source Code", "Siemens Nucleus NET", "Siemens Nucleus ReadyStart", "Siemens Nucleus 4 \u003c V4.1.0" ] }, "referenceLink": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf", "serverity": "\u9ad8", "submitTime": "2021-04-13", "title": "Siemens Nucleus\u4ea7\u54c1IPv6\u5806\u6808\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e" }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.