Siemens Nucleus RTOS FTP Server
The FTP server of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of the FTP server. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-38371US | high7.5 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
references
External citations — patches, advisories, analysis.
- SSA-313313: Denial of Service Vulnerability in the FTP Server of Nucleus RTOS - CSAF Versionself
- SSA-313313: Denial of Service Vulnerability in the FTP Server of Nucleus RTOS - PDF Versionself
- SSA-313313: Denial of Service Vulnerability in the FTP Server of Nucleus RTOS - TXT Versionself
- ICS Advisory ICSA-22-286-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-286-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (10)
- MitigationNucleus NET for Nucleus PLUS V1
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationNucleus NET for Nucleus PLUS V2
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationNucleus ReadyStart V3 V2012
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationNucleus ReadyStart V3 V2017
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationNucleus Source Code
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- FixedNucleus NET for Nucleus PLUS V1
Update to V5.2a as available in Nucleus PLUS V1.15 and apply the patch "v2022.11"
https://support.sw.siemens.com/en-US/product/852852095/ - FixedNucleus NET for Nucleus PLUS V2
Update to V5.4 as available in Nucleus PLUS V2.1f and apply the patch "v2022.11"
https://support.sw.siemens.com/en-US/product/852852095/ - FixedNucleus ReadyStart V3 V2012
Update to V2012.08.1 and apply the patch "v2022.11"
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3 V2017
Update to V2017.02.4 and apply the patch "2017.02.4_patch_CVE-2022-38371"
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus Source Code
Contact customer support to receive patch and update information
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan