Siemens Capital VSTAR
Multiple vulnerabilities (also known as "NUCLEUS:13") have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/html/ssa-044112.html. Capital Embedded AR Classic uses an affected version of the Nucleus software and inherently contains several of these vulnerabilities. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-31890US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31889US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31883US | high7.5 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP ACK mes… | ||||
| CVE-2021-31882US | high7.5 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). The DHCP client application do… | ||||
| CVE-2021-31881US | high7.5 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP OFFER m… | ||||
| CVE-2021-31346US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31345US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31344US | medium5.3 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
references
External citations — patches, advisories, analysis.
- SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic - CSAF Versionself
- SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic - HTML Versionself
- ICS Advisory ICSA-21-350-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-350-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (32)
- MitigationCapital Embedded AR Classic 431-422
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic 431-422
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic 431-422
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic 431-422
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic 431-422
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic 431-422
Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic 431-422
Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic 431-422
Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic R20-11
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic R20-11
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic R20-11
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic R20-11
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic R20-11
Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11
Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11
Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option
- No fix plannedCapital Embedded AR Classic 431-422
Currently no fix is planned
- No fix plannedCapital Embedded AR Classic 431-422
Currently no fix is planned
- No fix plannedCapital Embedded AR Classic 431-422
Currently no fix is planned
- No fix plannedCapital Embedded AR Classic 431-422
Currently no fix is planned
- No fix plannedCapital Embedded AR Classic 431-422
Currently no fix is planned
- No fix plannedCapital Embedded AR Classic 431-422
Currently no fix is planned
- No fix plannedCapital Embedded AR Classic 431-422
Currently no fix is planned
- No fix plannedCapital Embedded AR Classic 431-422
Currently no fix is planned
- FixedCapital Embedded AR Classic R20-11
Update to V2303 or later version
- FixedCapital Embedded AR Classic R20-11
Update to V2303 or later version
- FixedCapital Embedded AR Classic R20-11
Update to V2303 or later version
- FixedCapital Embedded AR Classic R20-11
Update to V2303 or later version
- FixedCapital Embedded AR Classic R20-11
Update to V2303 or later version
- FixedCapital Embedded AR Classic R20-11
Update to V2303 or later version
- FixedCapital Embedded AR Classic R20-11
Update to V2303 or later version
- FixedCapital Embedded AR Classic R20-11
Update to V2303 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan