Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2021-27393 (GCVE-0-2021-27393)
Vulnerability from cvelistv5
- CWE-330 - Use of Insufficiently Random Values
Vendor | Product | Version | ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Siemens | Nucleus NET |
Version: All versions |
|||||||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T20:48:16.739Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Nucleus NET", "vendor": "Siemens", "versions": [ { "status": "affected", "version": "All versions" } ] }, { "product": "Nucleus ReadyStart V3", "vendor": "Siemens", "versions": [ { "status": "affected", "version": "All versions \u003c V2013.08" } ] }, { "product": "Nucleus Source Code", "vendor": "Siemens", "versions": [ { "status": "affected", "version": "Versions including affected DNS modules" } ] } ], "descriptions": [ { "lang": "en", "value": "A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving." } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-330", "description": "CWE-330: Use of Insufficiently Random Values", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2022-01-11T11:27:04", "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "productcert@siemens.com", "ID": "CVE-2021-27393", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Nucleus NET", "version": { "version_data": [ { "version_value": "All versions" } ] } }, { "product_name": "Nucleus ReadyStart V3", "version": { "version_data": [ { "version_value": "All versions \u003c V2013.08" } ] } }, { "product_name": "Nucleus Source Code", "version": { "version_data": [ { "version_value": "Versions including affected DNS modules" } ] } } ] }, "vendor_name": "Siemens" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-330: Use of Insufficiently Random Values" } ] } ] }, "references": { "reference_data": [ { "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf", "refsource": "MISC", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf" } ] } } } }, "cveMetadata": { "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "assignerShortName": "siemens", "cveId": "CVE-2021-27393", "datePublished": "2021-04-22T20:42:21", "dateReserved": "2021-02-18T00:00:00", "dateUpdated": "2024-08-03T20:48:16.739Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2021-27393\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2021-04-22T21:15:10.393\",\"lastModified\":\"2024-11-21T05:57:54.343\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en Nucleus NET (Todas las versiones), Nucleus ReadyStart V3 (Todas las versiones anteriores a V2013.08), Nucleus Source Code (Versiones que incluyen los m\u00f3dulos DNS afectados). El cliente DNS no aleatoriza correctamente los n\u00fameros de puerto UDP de las peticiones DNS. Esto podr\u00eda permitir a un atacante envenenar la cach\u00e9 DNS o falsificar la resoluci\u00f3n DNS.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:P/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-330\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-330\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A987CFB-4A41-4F82-8C7F-31DE8F0650DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2013.08\",\"matchCriteriaId\":\"68638787-E37D-483F-8E83-51C9A52ECC8D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53A38C64-612A-4BC5-83D5-D3FA1C90E0F7\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf\",\"source\":\"productcert@siemens.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}" } }
ghsa-x7x4-r59j-h6w9
Vulnerability from github
A vulnerability has been identified in Nucleus NET (All versions), Nucleus RTOS (versions including affected DNS modules), Nucleus ReadyStart (All versions < V2013.08), Nucleus Source Code (versions including affected DNS modules), VSTAR (versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.
{ "affected": [], "aliases": [ "CVE-2021-27393" ], "database_specific": { "cwe_ids": [ "CWE-330" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2021-04-22T21:15:00Z", "severity": "MODERATE" }, "details": "A vulnerability has been identified in Nucleus NET (All versions), Nucleus RTOS (versions including affected DNS modules), Nucleus ReadyStart (All versions \u003c V2013.08), Nucleus Source Code (versions including affected DNS modules), VSTAR (versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.", "id": "GHSA-x7x4-r59j-h6w9", "modified": "2022-05-24T17:48:18Z", "published": "2022-05-24T17:48:18Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-27393" }, { "type": "WEB", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "type": "CVSS_V3" } ] }
fkie_cve-2021-27393
Vulnerability from fkie_nvd
Vendor | Product | Version | |
---|---|---|---|
siemens | nucleus_net | * | |
siemens | nucleus_readystart_v3 | * | |
siemens | nucleus_source_code | - |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*", "matchCriteriaId": "7A987CFB-4A41-4F82-8C7F-31DE8F0650DE", "vulnerable": true }, { "criteria": "cpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:*", "matchCriteriaId": "68638787-E37D-483F-8E83-51C9A52ECC8D", "versionEndExcluding": "2013.08", "vulnerable": true }, { "criteria": "cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*", "matchCriteriaId": "53A38C64-612A-4BC5-83D5-D3FA1C90E0F7", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving." }, { "lang": "es", "value": "Se ha identificado una vulnerabilidad en Nucleus NET (Todas las versiones), Nucleus ReadyStart V3 (Todas las versiones anteriores a V2013.08), Nucleus Source Code (Versiones que incluyen los m\u00f3dulos DNS afectados). El cliente DNS no aleatoriza correctamente los n\u00fameros de puerto UDP de las peticiones DNS. Esto podr\u00eda permitir a un atacante envenenar la cach\u00e9 DNS o falsificar la resoluci\u00f3n DNS." } ], "id": "CVE-2021-27393", "lastModified": "2024-11-21T05:57:54.343", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2021-04-22T21:15:10.393", "references": [ { "source": "productcert@siemens.com", "tags": [ "Vendor Advisory" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf" } ], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-330" } ], "source": "productcert@siemens.com", "type": "Primary" }, { "description": [ { "lang": "en", "value": "CWE-330" } ], "source": "nvd@nist.gov", "type": "Secondary" } ] }
var-202104-1828
Vulnerability from variot
A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving. The Nucleus NET module contains a series of standard-compliant network and communication protocols, drivers and utilities to provide full-featured network support in any embedded device. Nucleus RTOS provides a highly scalable microkernel-based real-time operating system designed for the scalability and reliability of systems in aerospace, industrial and medical applications. VSTAR is a complete AUTOSAR 4 based ECU solution that provides tools and embedded software for timely product deployment. Nucleus ReadyStart is a platform with integrated software IP, tools and services.
The DNS module of Siemens Nucleus products has security vulnerabilities. Pillow is a Python-based image processing library. There is currently no information about this vulnerability, please feel free to follow CNNVD or manufacturer announcements
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-202104-1828", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "nucleus source code", "scope": "eq", "trust": 1.0, "vendor": "siemens", "version": null }, { "model": "nucleus net", "scope": "eq", "trust": 1.0, "vendor": "siemens", "version": "*" }, { "model": "nucleus readystart v3", "scope": "lt", "trust": 1.0, "vendor": "siemens", "version": "2013.08" }, { "model": "vstar", "scope": null, "trust": 0.6, "vendor": "siemens", "version": null }, { "model": "nucleus source code", "scope": null, "trust": 0.6, "vendor": "siemens", "version": null }, { "model": "nucleus rtos", "scope": null, "trust": 0.6, "vendor": "siemens", "version": null }, { "model": "nucleus net", "scope": null, "trust": 0.6, "vendor": "siemens", "version": null }, { "model": "nucleus readystart", "scope": "lt", "trust": 0.6, "vendor": "siemens", "version": "v2013.08" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2021-28698" }, { "db": "NVD", "id": "CVE-2021-27393" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Siemens reported this vulnerability to CISA.", "sources": [ { "db": "CNNVD", "id": "CNNVD-202104-921" } ], "trust": 0.6 }, "cve": "CVE-2021-27393", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "CVE-2021-27393", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 1.1, "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "CNVD-2021-28698", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "exploitabilityScore": 3.9, "id": "CVE-2021-27393", "impactScore": 1.4, "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2021-27393", "trust": 1.0, "value": "MEDIUM" }, { "author": "CNVD", "id": "CNVD-2021-28698", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-202104-975", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-202104-921", "trust": 0.6, "value": "MEDIUM" }, { "author": "VULMON", "id": "CVE-2021-27393", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2021-28698" }, { "db": "VULMON", "id": "CVE-2021-27393" }, { "db": "CNNVD", "id": "CNNVD-202104-975" }, { "db": "CNNVD", "id": "CNNVD-202104-921" }, { "db": "NVD", "id": "CVE-2021-27393" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving. The Nucleus NET module contains a series of standard-compliant network and communication protocols, drivers and utilities to provide full-featured network support in any embedded device. Nucleus RTOS provides a highly scalable microkernel-based real-time operating system designed for the scalability and reliability of systems in aerospace, industrial and medical applications. VSTAR is a complete AUTOSAR 4 based ECU solution that provides tools and embedded software for timely product deployment. Nucleus ReadyStart is a platform with integrated software IP, tools and services. \n\r\n\r\nThe DNS module of Siemens Nucleus products has security vulnerabilities. Pillow is a Python-based image processing library. \nThere is currently no information about this vulnerability, please feel free to follow CNNVD or manufacturer announcements", "sources": [ { "db": "NVD", "id": "CVE-2021-27393" }, { "db": "CNVD", "id": "CNVD-2021-28698" }, { "db": "CNNVD", "id": "CNNVD-202104-975" }, { "db": "VULMON", "id": "CVE-2021-27393" } ], "trust": 2.07 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "SIEMENS", "id": "SSA-201384", "trust": 2.3 }, { "db": "NVD", "id": "CVE-2021-27393", "trust": 2.3 }, { "db": "CNVD", "id": "CNVD-2021-28698", "trust": 0.6 }, { "db": "CS-HELP", "id": "SB2021041363", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-202104-975", "trust": 0.6 }, { "db": "ICS CERT", "id": "ICSA-21-103-14", "trust": 0.6 }, { "db": "CS-HELP", "id": "SB2021041408", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-202104-921", "trust": 0.6 }, { "db": "VULMON", "id": "CVE-2021-27393", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2021-28698" }, { "db": "VULMON", "id": "CVE-2021-27393" }, { "db": "CNNVD", "id": "CNNVD-202104-975" }, { "db": "CNNVD", "id": "CNNVD-202104-921" }, { "db": "NVD", "id": "CVE-2021-27393" } ] }, "id": "VAR-202104-1828", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2021-28698" } ], "trust": 1.1225228600000001 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2021-28698" } ] }, "last_update_date": "2024-11-23T21:14:20.608000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Patch for Siemens Nucleus product DNS module can predict UDP port number vulnerability", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchInfo/show/258426" }, { "title": "Siemens Security Advisories: Siemens Security Advisory", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories\u0026qid=05c4bed0fc8868101fc6066abbc9f1a5" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2021-28698" }, { "db": "VULMON", "id": "CVE-2021-27393" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-330", "trust": 1.0 } ], "sources": [ { "db": "NVD", "id": "CVE-2021-27393" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.3, "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf" }, { "trust": 0.6, "url": "https://www.cybersecurity-help.cz/vdb/sb2021041363" }, { "trust": 0.6, "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-14" }, { "trust": 0.6, "url": "https://www.cybersecurity-help.cz/vdb/sb2021041408" }, { "trust": 0.6, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-27393" }, { "trust": 0.1, "url": "https://cwe.mitre.org/data/definitions/330.html" }, { "trust": 0.1, "url": "https://nvd.nist.gov" }, { "trust": 0.1, "url": "https://cert-portal.siemens.com/productcert/txt/ssa-201384.txt" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2021-28698" }, { "db": "VULMON", "id": "CVE-2021-27393" }, { "db": "CNNVD", "id": "CNNVD-202104-975" }, { "db": "CNNVD", "id": "CNNVD-202104-921" }, { "db": "NVD", "id": "CVE-2021-27393" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2021-28698" }, { "db": "VULMON", "id": "CVE-2021-27393" }, { "db": "CNNVD", "id": "CNNVD-202104-975" }, { "db": "CNNVD", "id": "CNNVD-202104-921" }, { "db": "NVD", "id": "CVE-2021-27393" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2021-04-15T00:00:00", "db": "CNVD", "id": "CNVD-2021-28698" }, { "date": "2021-04-22T00:00:00", "db": "VULMON", "id": "CVE-2021-27393" }, { "date": "2021-04-13T00:00:00", "db": "CNNVD", "id": "CNNVD-202104-975" }, { "date": "2021-04-13T00:00:00", "db": "CNNVD", "id": "CNNVD-202104-921" }, { "date": "2021-04-22T21:15:10.393000", "db": "NVD", "id": "CVE-2021-27393" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2021-04-15T00:00:00", "db": "CNVD", "id": "CNVD-2021-28698" }, { "date": "2021-04-30T00:00:00", "db": "VULMON", "id": "CVE-2021-27393" }, { "date": "2021-04-14T00:00:00", "db": "CNNVD", "id": "CNNVD-202104-975" }, { "date": "2022-01-14T00:00:00", "db": "CNNVD", "id": "CNNVD-202104-921" }, { "date": "2024-11-21T05:57:54.343000", "db": "NVD", "id": "CVE-2021-27393" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-202104-921" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Siemens Nucleus product DNS module can predict UDP port number vulnerability", "sources": [ { "db": "CNVD", "id": "CNVD-2021-28698" } ], "trust": 0.6 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "other", "sources": [ { "db": "CNNVD", "id": "CNNVD-202104-975" } ], "trust": 0.6 } }
icsa-21-103-14
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "organization": "Siemens ProductCERT", "summary": "reporting this vulnerability to CISA." }, { "names": [ "Daniel dos Santos" ], "organization": "Forescout Technologies Inc.", "summary": "coordinated disclosure" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "notes": [ { "category": "summary", "text": "Security researchers discovered and disclosed 9 vulnerabilities in several DNS implementations, also known as \u201cNAME:WRECK\u201d vulnerabilities. The vulnerability described in this advisory is from this set.\n\nThe DNS client of of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains a vulnerability related to the handling of UDP port numbers in DNS requests that could allow an attacker to poison the DNS cache or spoof DNS resolving.\n\nSiemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available.", "title": "Summary" }, { "category": "general", "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", "title": "General Recommendations" }, { "category": "general", "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", "title": "Additional Resources" }, { "category": "legal_disclaimer", "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.", "title": "Terms of Use" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "other", "text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.", "title": "Advisory Conversion Disclaimer" }, { "category": "other", "text": "Multiple", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.", "title": "Recommended Practices" }, { "category": "general", "text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.", "title": "Recommended Practices" }, { "category": "general", "text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.", "title": "Recommended Practices" }, { "category": "general", "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.", "title": "Recommended Practices" } ], "publisher": { "category": "other", "contact_details": "central@cisa.dhs.gov", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "SSA-201384: Predictable UDP Port Number Vulnerability (NAME:WRECK) in the DNS Module of Nucleus RTOS - CSAF Version", "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-201384.json" }, { "category": "self", "summary": "SSA-201384: Predictable UDP Port Number Vulnerability (NAME:WRECK) in the DNS Module of Nucleus RTOS - TXT Version", "url": "https://cert-portal.siemens.com/productcert/txt/ssa-201384.txt" }, { "category": "self", "summary": "SSA-201384: Predictable UDP Port Number Vulnerability (NAME:WRECK) in the DNS Module of Nucleus RTOS - PDF Version", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf" }, { "category": "self", "summary": "ICS Advisory ICSA-21-103-14 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-103-14.json" }, { "category": "self", "summary": "ICS Advisory ICSA-21-103-14 - Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-103-14" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/topics/industrial-control-systems" }, { "category": "external", "summary": "Recommended Practices", "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B" } ], "title": "Siemens Nucleus DNS (Update A)", "tracking": { "current_release_date": "2025-05-06T06:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-21-103-14", "initial_release_date": "2021-04-13T00:00:00.000000Z", "revision_history": [ { "date": "2021-04-13T00:00:00.000000Z", "legacy_version": "1.0", "number": "1", "summary": "Publication Date" }, { "date": "2021-11-09T00:00:00.000000Z", "legacy_version": "1.1", "number": "2", "summary": "Consolidated list of products" }, { "date": "2022-01-11T00:00:00.000000Z", "legacy_version": "1.2", "number": "3", "summary": "Removed CAPITAL VSTAR as not affected" }, { "date": "2025-05-06T06:00:00.000000Z", "legacy_version": "Revision", "number": "4", "summary": "Revision - Fixing typos" } ], "status": "final", "version": "4" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Nucleus NET", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "Nucleus NET" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV2013.08", "product": { "name": "Nucleus ReadyStart V3", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "Nucleus ReadyStart V3" }, { "branches": [ { "category": "product_version_range", "name": "including_affected_DNS_modules", "product": { "name": "Nucleus Source Code", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "Nucleus Source Code" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-27393", "cwe": { "id": "CWE-330", "name": "Use of Insufficiently Random Values" }, "notes": [ { "category": "summary", "text": "The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] }, "references": [ { "summary": "CVE-2021-27393 - Nucleus ReadyStart V3", "url": "https://support.sw.siemens.com/en-US/product/1009925838/" }, { "summary": "CVE-2021-27393 Mitre 5.0 json", "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2021-27393.json" } ], "remediations": [ { "category": "mitigation", "details": "Update to the latest version of Nucleus ReadyStart V3 or V4", "product_ids": [ "CSAFPID-0001" ] }, { "category": "mitigation", "details": "Contact customer support or your local Nucleus Sales team for mitigation advice", "product_ids": [ "CSAFPID-0001" ] }, { "category": "no_fix_planned", "details": "Currently no remediation is planned", "product_ids": [ "CSAFPID-0001" ] }, { "category": "vendor_fix", "details": "Update to V2013.08 or later version", "product_ids": [ "CSAFPID-0002" ], "url": "https://support.sw.siemens.com/en-US/product/1009925838/" }, { "category": "vendor_fix", "details": "Contact customer support to receive patch and update information", "product_ids": [ "CSAFPID-0003" ] }, { "category": "mitigation", "details": "Avoid using DNS client of affected versions", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] } ], "title": "CVE-2021-27393" } ] }
ICSA-21-103-14
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "organization": "Siemens ProductCERT", "summary": "reporting this vulnerability to CISA." }, { "names": [ "Daniel dos Santos" ], "organization": "Forescout Technologies Inc.", "summary": "coordinated disclosure" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "notes": [ { "category": "summary", "text": "Security researchers discovered and disclosed 9 vulnerabilities in several DNS implementations, also known as \u201cNAME:WRECK\u201d vulnerabilities. The vulnerability described in this advisory is from this set.\n\nThe DNS client of of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains a vulnerability related to the handling of UDP port numbers in DNS requests that could allow an attacker to poison the DNS cache or spoof DNS resolving.\n\nSiemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available.", "title": "Summary" }, { "category": "general", "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", "title": "General Recommendations" }, { "category": "general", "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", "title": "Additional Resources" }, { "category": "legal_disclaimer", "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.", "title": "Terms of Use" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "other", "text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.", "title": "Advisory Conversion Disclaimer" }, { "category": "other", "text": "Multiple", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.", "title": "Recommended Practices" }, { "category": "general", "text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.", "title": "Recommended Practices" }, { "category": "general", "text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.", "title": "Recommended Practices" }, { "category": "general", "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.", "title": "Recommended Practices" } ], "publisher": { "category": "other", "contact_details": "central@cisa.dhs.gov", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "SSA-201384: Predictable UDP Port Number Vulnerability (NAME:WRECK) in the DNS Module of Nucleus RTOS - CSAF Version", "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-201384.json" }, { "category": "self", "summary": "SSA-201384: Predictable UDP Port Number Vulnerability (NAME:WRECK) in the DNS Module of Nucleus RTOS - TXT Version", "url": "https://cert-portal.siemens.com/productcert/txt/ssa-201384.txt" }, { "category": "self", "summary": "SSA-201384: Predictable UDP Port Number Vulnerability (NAME:WRECK) in the DNS Module of Nucleus RTOS - PDF Version", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf" }, { "category": "self", "summary": "ICS Advisory ICSA-21-103-14 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-103-14.json" }, { "category": "self", "summary": "ICS Advisory ICSA-21-103-14 - Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-103-14" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/topics/industrial-control-systems" }, { "category": "external", "summary": "Recommended Practices", "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B" } ], "title": "Siemens Nucleus DNS (Update A)", "tracking": { "current_release_date": "2025-05-06T06:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-21-103-14", "initial_release_date": "2021-04-13T00:00:00.000000Z", "revision_history": [ { "date": "2021-04-13T00:00:00.000000Z", "legacy_version": "1.0", "number": "1", "summary": "Publication Date" }, { "date": "2021-11-09T00:00:00.000000Z", "legacy_version": "1.1", "number": "2", "summary": "Consolidated list of products" }, { "date": "2022-01-11T00:00:00.000000Z", "legacy_version": "1.2", "number": "3", "summary": "Removed CAPITAL VSTAR as not affected" }, { "date": "2025-05-06T06:00:00.000000Z", "legacy_version": "Revision", "number": "4", "summary": "Revision - Fixing typos" } ], "status": "final", "version": "4" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Nucleus NET", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "Nucleus NET" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV2013.08", "product": { "name": "Nucleus ReadyStart V3", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "Nucleus ReadyStart V3" }, { "branches": [ { "category": "product_version_range", "name": "including_affected_DNS_modules", "product": { "name": "Nucleus Source Code", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "Nucleus Source Code" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-27393", "cwe": { "id": "CWE-330", "name": "Use of Insufficiently Random Values" }, "notes": [ { "category": "summary", "text": "The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] }, "references": [ { "summary": "CVE-2021-27393 - Nucleus ReadyStart V3", "url": "https://support.sw.siemens.com/en-US/product/1009925838/" }, { "summary": "CVE-2021-27393 Mitre 5.0 json", "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2021-27393.json" } ], "remediations": [ { "category": "mitigation", "details": "Update to the latest version of Nucleus ReadyStart V3 or V4", "product_ids": [ "CSAFPID-0001" ] }, { "category": "mitigation", "details": "Contact customer support or your local Nucleus Sales team for mitigation advice", "product_ids": [ "CSAFPID-0001" ] }, { "category": "no_fix_planned", "details": "Currently no remediation is planned", "product_ids": [ "CSAFPID-0001" ] }, { "category": "vendor_fix", "details": "Update to V2013.08 or later version", "product_ids": [ "CSAFPID-0002" ], "url": "https://support.sw.siemens.com/en-US/product/1009925838/" }, { "category": "vendor_fix", "details": "Contact customer support to receive patch and update information", "product_ids": [ "CSAFPID-0003" ] }, { "category": "mitigation", "details": "Avoid using DNS client of affected versions", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003" ] } ], "title": "CVE-2021-27393" } ] }
cnvd-2021-28698
Vulnerability from cnvd
Title: Siemens Nucleus产品DNS模块可预测UDP端口号漏洞
Description:
Nucleus NET模块包含了一系列符合标准的网络和通信协议、驱动程序和实用程序,以在任何嵌入式设备中提供全功能的网络支持。Nucleus RTOS提供了一个高度可扩展的基于微内核的实时操作系统,该系统设计用于航天、工业和医疗应用范围内的系统的可扩展性和可靠性。VSTAR是一个完整的基于AUTOSAR 4的ECU解决方案,为及时部署产品提供工具和嵌入式软件。Nucleus ReadyStart是一个具有集成软件IP、工具和服务的平台。
Siemens Nucleus产品DNS模块存在安全漏洞。该漏洞是由于DNS客户端未正确随机化UDP端口数的DNS请求。攻击者可利用漏洞导致DNS缓存中毒或欺骗DNS解析。
Severity: 中
Patch Name: Siemens Nucleus产品DNS模块可预测UDP端口号漏洞的补丁
Patch Description:
Nucleus NET模块包含了一系列符合标准的网络和通信协议、驱动程序和实用程序,以在任何嵌入式设备中提供全功能的网络支持。Nucleus RTOS提供了一个高度可扩展的基于微内核的实时操作系统,该系统设计用于航天、工业和医疗应用范围内的系统的可扩展性和可靠性。VSTAR是一个完整的基于AUTOSAR 4的ECU解决方案,为及时部署产品提供工具和嵌入式软件。Nucleus ReadyStart是一个具有集成软件IP、工具和服务的平台。
Siemens Nucleus产品DNS模块存在安全漏洞。该漏洞是由于DNS客户端未正确随机化UDP端口数的DNS请求。攻击者可利用漏洞导致DNS缓存中毒或欺骗DNS解析。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description:
用户可参考如下供应商提供的安全公告获得补丁信息: https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf
Reference: https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf
Name | ['Siemens Nucleus NET', 'Siemens Nucleus RTOS', 'Siemens Nucleus Source Code', 'Siemens VSTAR', 'Siemens Nucleus ReadyStart < V2013.08'] |
---|
{ "cves": { "cve": { "cveNumber": "CVE-2021-27393" } }, "description": "Nucleus NET\u6a21\u5757\u5305\u542b\u4e86\u4e00\u7cfb\u5217\u7b26\u5408\u6807\u51c6\u7684\u7f51\u7edc\u548c\u901a\u4fe1\u534f\u8bae\u3001\u9a71\u52a8\u7a0b\u5e8f\u548c\u5b9e\u7528\u7a0b\u5e8f\uff0c\u4ee5\u5728\u4efb\u4f55\u5d4c\u5165\u5f0f\u8bbe\u5907\u4e2d\u63d0\u4f9b\u5168\u529f\u80fd\u7684\u7f51\u7edc\u652f\u6301\u3002Nucleus RTOS\u63d0\u4f9b\u4e86\u4e00\u4e2a\u9ad8\u5ea6\u53ef\u6269\u5c55\u7684\u57fa\u4e8e\u5fae\u5185\u6838\u7684\u5b9e\u65f6\u64cd\u4f5c\u7cfb\u7edf\uff0c\u8be5\u7cfb\u7edf\u8bbe\u8ba1\u7528\u4e8e\u822a\u5929\u3001\u5de5\u4e1a\u548c\u533b\u7597\u5e94\u7528\u8303\u56f4\u5185\u7684\u7cfb\u7edf\u7684\u53ef\u6269\u5c55\u6027\u548c\u53ef\u9760\u6027\u3002VSTAR\u662f\u4e00\u4e2a\u5b8c\u6574\u7684\u57fa\u4e8eAUTOSAR 4\u7684ECU\u89e3\u51b3\u65b9\u6848\uff0c\u4e3a\u53ca\u65f6\u90e8\u7f72\u4ea7\u54c1\u63d0\u4f9b\u5de5\u5177\u548c\u5d4c\u5165\u5f0f\u8f6f\u4ef6\u3002Nucleus ReadyStart\u662f\u4e00\u4e2a\u5177\u6709\u96c6\u6210\u8f6f\u4ef6IP\u3001\u5de5\u5177\u548c\u670d\u52a1\u7684\u5e73\u53f0\u3002\n\nSiemens Nucleus\u4ea7\u54c1DNS\u6a21\u5757\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8eDNS\u5ba2\u6237\u7aef\u672a\u6b63\u786e\u968f\u673a\u5316UDP\u7aef\u53e3\u6570\u7684DNS\u8bf7\u6c42\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u5bfc\u81f4DNS\u7f13\u5b58\u4e2d\u6bd2\u6216\u6b3a\u9a97DNS\u89e3\u6790\u3002", "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf", "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e", "number": "CNVD-2021-28698", "openTime": "2021-04-15", "patchDescription": "Nucleus NET\u6a21\u5757\u5305\u542b\u4e86\u4e00\u7cfb\u5217\u7b26\u5408\u6807\u51c6\u7684\u7f51\u7edc\u548c\u901a\u4fe1\u534f\u8bae\u3001\u9a71\u52a8\u7a0b\u5e8f\u548c\u5b9e\u7528\u7a0b\u5e8f\uff0c\u4ee5\u5728\u4efb\u4f55\u5d4c\u5165\u5f0f\u8bbe\u5907\u4e2d\u63d0\u4f9b\u5168\u529f\u80fd\u7684\u7f51\u7edc\u652f\u6301\u3002Nucleus RTOS\u63d0\u4f9b\u4e86\u4e00\u4e2a\u9ad8\u5ea6\u53ef\u6269\u5c55\u7684\u57fa\u4e8e\u5fae\u5185\u6838\u7684\u5b9e\u65f6\u64cd\u4f5c\u7cfb\u7edf\uff0c\u8be5\u7cfb\u7edf\u8bbe\u8ba1\u7528\u4e8e\u822a\u5929\u3001\u5de5\u4e1a\u548c\u533b\u7597\u5e94\u7528\u8303\u56f4\u5185\u7684\u7cfb\u7edf\u7684\u53ef\u6269\u5c55\u6027\u548c\u53ef\u9760\u6027\u3002VSTAR\u662f\u4e00\u4e2a\u5b8c\u6574\u7684\u57fa\u4e8eAUTOSAR 4\u7684ECU\u89e3\u51b3\u65b9\u6848\uff0c\u4e3a\u53ca\u65f6\u90e8\u7f72\u4ea7\u54c1\u63d0\u4f9b\u5de5\u5177\u548c\u5d4c\u5165\u5f0f\u8f6f\u4ef6\u3002Nucleus ReadyStart\u662f\u4e00\u4e2a\u5177\u6709\u96c6\u6210\u8f6f\u4ef6IP\u3001\u5de5\u5177\u548c\u670d\u52a1\u7684\u5e73\u53f0\u3002\r\n\r\nSiemens Nucleus\u4ea7\u54c1DNS\u6a21\u5757\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8eDNS\u5ba2\u6237\u7aef\u672a\u6b63\u786e\u968f\u673a\u5316UDP\u7aef\u53e3\u6570\u7684DNS\u8bf7\u6c42\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u5bfc\u81f4DNS\u7f13\u5b58\u4e2d\u6bd2\u6216\u6b3a\u9a97DNS\u89e3\u6790\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002", "patchName": "Siemens Nucleus\u4ea7\u54c1DNS\u6a21\u5757\u53ef\u9884\u6d4bUDP\u7aef\u53e3\u53f7\u6f0f\u6d1e\u7684\u8865\u4e01", "products": { "product": [ "Siemens Nucleus NET", "Siemens Nucleus RTOS", "Siemens Nucleus Source Code", "Siemens VSTAR", "Siemens Nucleus ReadyStart \u003c V2013.08" ] }, "referenceLink": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf", "serverity": "\u4e2d", "submitTime": "2021-04-13", "title": "Siemens Nucleus\u4ea7\u54c1DNS\u6a21\u5757\u53ef\u9884\u6d4bUDP\u7aef\u53e3\u53f7\u6f0f\u6d1e" }
wid-sec-w-2023-1986
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Nucleus Net ist der Netzwerk-Stack f\u00fcr das Nucleus RTOS Echtzeitbetriebssystem.\r\nNucleus RTOS ist ein Echtzeitbetriebssystem f\u00fcr Embedded Devices.\r\nAzure RTOS NetX ist ein TCP/IP IPv4 Embedded Network Stack, der f\u00fcr Embedded-, Echtzeit- und IoT-Anwendungen entwickelt wurde. \r\nVxWorks ist ein propriet\u00e4res Echtzeitbetriebssystem, das von Wind River Systems entwickelt wird.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens Nucleus Net, Siemens Nucleus RTOS, Microsoft Azure RTOS NetX und Wind River VxWorks ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuf\u00fchren oder einen Denial of Service zu verursachen.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-1986 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2023-1986.json" }, { "category": "self", "summary": "WID-SEC-2023-1986 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1986" }, { "category": "external", "summary": "Forescout Report vom 2021-04-15", "url": "https://www.forescout.com/company/resources/namewreck-breaking-and-fixing-dns-implementations/" }, { "category": "external", "summary": "Siemens Security Advisory by Siemens ProductCERT", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-185699.pdf" }, { "category": "external", "summary": "Siemens Security Advisory by Siemens ProductCERT", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf" }, { "category": "external", "summary": "Siemens Security Advisory SSA-180579 vom 2023-08-08", "url": "https://cert-portal.siemens.com/productcert/html/ssa-180579.html" }, { "category": "external", "summary": "Siemens Security Advisory SSA-248289 vom 2024-02-13", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" } ], "source_lang": "en-US", "title": "NAME:WRECK: Mehrere Schwachstellen in TCP/IP Stacks", "tracking": { "current_release_date": "2024-02-12T23:00:00.000+00:00", "generator": { "date": "2024-08-15T17:56:40.873+00:00", "engine": { "name": "BSI-WID", "version": "1.3.5" } }, "id": "WID-SEC-W-2023-1986", "initial_release_date": "2021-04-15T22:00:00.000+00:00", "revision_history": [ { "date": "2021-04-15T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2021-05-02T22:00:00.000+00:00", "number": "2", "summary": "CVE\u0027s erg\u00e4nzt" }, { "date": "2021-11-08T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Siemens aufgenommen" }, { "date": "2023-08-07T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von Siemens aufgenommen" }, { "date": "2024-02-12T23:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Siemens aufgenommen" } ], "status": "final", "version": "5" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Microsoft Azure RTOS NetX", "product": { "name": "Microsoft Azure RTOS NetX", "product_id": "T018910", "product_identification_helper": { "cpe": "cpe:/o:microsoft:azure_rtos_netx:-" } } } ], "category": "vendor", "name": "Microsoft" }, { "branches": [ { "category": "product_name", "name": "Siemens Nucleus Net", "product": { "name": "Siemens Nucleus Net", "product_id": "683157", "product_identification_helper": { "cpe": "cpe:/a:siemens:nucleus_net:-" } } }, { "category": "product_name", "name": "Siemens Nucleus RTOS", "product": { "name": "Siemens Nucleus RTOS", "product_id": "683163", "product_identification_helper": { "cpe": "cpe:/o:siemens:nucleus_rtos:-" } } } ], "category": "vendor", "name": "Siemens" }, { "branches": [ { "category": "product_name", "name": "Wind River VxWorks", "product": { "name": "Wind River VxWorks", "product_id": "T018911", "product_identification_helper": { "cpe": "cpe:/o:windriver:vxworks:-" } } } ], "category": "vendor", "name": "Wind River" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-20009", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2016-20009" }, { "cve": "CVE-2020-15795", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-15795" }, { "cve": "CVE-2020-27009", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27009" }, { "cve": "CVE-2020-27736", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27736" }, { "cve": "CVE-2020-27737", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27737" }, { "cve": "CVE-2020-27738", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27738" }, { "cve": "CVE-2021-25663", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-25663" }, { "cve": "CVE-2021-25664", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-25664" }, { "cve": "CVE-2021-25677", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-25677" }, { "cve": "CVE-2021-27393", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-27393" } ] }
WID-SEC-W-2023-1986
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Nucleus Net ist der Netzwerk-Stack f\u00fcr das Nucleus RTOS Echtzeitbetriebssystem.\r\nNucleus RTOS ist ein Echtzeitbetriebssystem f\u00fcr Embedded Devices.\r\nAzure RTOS NetX ist ein TCP/IP IPv4 Embedded Network Stack, der f\u00fcr Embedded-, Echtzeit- und IoT-Anwendungen entwickelt wurde. \r\nVxWorks ist ein propriet\u00e4res Echtzeitbetriebssystem, das von Wind River Systems entwickelt wird.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens Nucleus Net, Siemens Nucleus RTOS, Microsoft Azure RTOS NetX und Wind River VxWorks ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuf\u00fchren oder einen Denial of Service zu verursachen.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-1986 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2023-1986.json" }, { "category": "self", "summary": "WID-SEC-2023-1986 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1986" }, { "category": "external", "summary": "Forescout Report vom 2021-04-15", "url": "https://www.forescout.com/company/resources/namewreck-breaking-and-fixing-dns-implementations/" }, { "category": "external", "summary": "Siemens Security Advisory by Siemens ProductCERT", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-185699.pdf" }, { "category": "external", "summary": "Siemens Security Advisory by Siemens ProductCERT", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf" }, { "category": "external", "summary": "Siemens Security Advisory SSA-180579 vom 2023-08-08", "url": "https://cert-portal.siemens.com/productcert/html/ssa-180579.html" }, { "category": "external", "summary": "Siemens Security Advisory SSA-248289 vom 2024-02-13", "url": "https://cert-portal.siemens.com/productcert/html/ssa-248289.html" } ], "source_lang": "en-US", "title": "NAME:WRECK: Mehrere Schwachstellen in TCP/IP Stacks", "tracking": { "current_release_date": "2024-02-12T23:00:00.000+00:00", "generator": { "date": "2024-08-15T17:56:40.873+00:00", "engine": { "name": "BSI-WID", "version": "1.3.5" } }, "id": "WID-SEC-W-2023-1986", "initial_release_date": "2021-04-15T22:00:00.000+00:00", "revision_history": [ { "date": "2021-04-15T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2021-05-02T22:00:00.000+00:00", "number": "2", "summary": "CVE\u0027s erg\u00e4nzt" }, { "date": "2021-11-08T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Siemens aufgenommen" }, { "date": "2023-08-07T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von Siemens aufgenommen" }, { "date": "2024-02-12T23:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Siemens aufgenommen" } ], "status": "final", "version": "5" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Microsoft Azure RTOS NetX", "product": { "name": "Microsoft Azure RTOS NetX", "product_id": "T018910", "product_identification_helper": { "cpe": "cpe:/o:microsoft:azure_rtos_netx:-" } } } ], "category": "vendor", "name": "Microsoft" }, { "branches": [ { "category": "product_name", "name": "Siemens Nucleus Net", "product": { "name": "Siemens Nucleus Net", "product_id": "683157", "product_identification_helper": { "cpe": "cpe:/a:siemens:nucleus_net:-" } } }, { "category": "product_name", "name": "Siemens Nucleus RTOS", "product": { "name": "Siemens Nucleus RTOS", "product_id": "683163", "product_identification_helper": { "cpe": "cpe:/o:siemens:nucleus_rtos:-" } } } ], "category": "vendor", "name": "Siemens" }, { "branches": [ { "category": "product_name", "name": "Wind River VxWorks", "product": { "name": "Wind River VxWorks", "product_id": "T018911", "product_identification_helper": { "cpe": "cpe:/o:windriver:vxworks:-" } } } ], "category": "vendor", "name": "Wind River" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-20009", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2016-20009" }, { "cve": "CVE-2020-15795", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-15795" }, { "cve": "CVE-2020-27009", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27009" }, { "cve": "CVE-2020-27736", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27736" }, { "cve": "CVE-2020-27737", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27737" }, { "cve": "CVE-2020-27738", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2020-27738" }, { "cve": "CVE-2021-25663", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-25663" }, { "cve": "CVE-2021-25664", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-25664" }, { "cve": "CVE-2021-25677", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-25677" }, { "cve": "CVE-2021-27393", "notes": [ { "category": "description", "text": "In der DNS-Implementierung in weitgenutzten TCP/IP Stacks bestehen mehrere Schwachstellen, die sich in Server-Anwendungen, aber auch IoT und OT-Devices befinden. Sie basieren gr\u00f6\u00dftenteils auf Fehlern in der Kompressionsfunktion der DNS-Implementierung. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code mit Administratorrechten zur Ausf\u00fchrung zu bringen oder einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "683157", "T018910", "T018911", "683163" ] }, "release_date": "2021-04-15T22:00:00.000+00:00", "title": "CVE-2021-27393" } ] }
gsd-2021-27393
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2021-27393", "description": "A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.", "id": "GSD-2021-27393" }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2021-27393" ], "details": "A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.", "id": "GSD-2021-27393", "modified": "2023-12-13T01:23:35.780529Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "productcert@siemens.com", "ID": "CVE-2021-27393", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Nucleus NET", "version": { "version_data": [ { "version_value": "All versions" } ] } }, { "product_name": "Nucleus ReadyStart V3", "version": { "version_data": [ { "version_value": "All versions \u003c V2013.08" } ] } }, { "product_name": "Nucleus Source Code", "version": { "version_data": [ { "version_value": "Versions including affected DNS modules" } ] } } ] }, "vendor_name": "Siemens" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-330: Use of Insufficiently Random Values" } ] } ] }, "references": { "reference_data": [ { "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf", "refsource": "MISC", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "2013.08", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "productcert@siemens.com", "ID": "CVE-2021-27393" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions \u003c V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-330" } ] } ] }, "references": { "reference_data": [ { "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf", "refsource": "MISC", "tags": [ "Vendor Advisory" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 1.4 } }, "lastModifiedDate": "2022-04-22T19:38Z", "publishedDate": "2021-04-22T21:15Z" } } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.