Siemens Nucleus RTOS TCP/IP Stack
The TCP/IP stack and related services (FTP, TFTP) of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contain several vulnerabilities, also known as "NUCLEUS:13" and as documented below. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not available.
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-31890US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31889US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31888US | high8.8 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
| CVE-2021-31887US | high8.8 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
| CVE-2021-31886US | critical9.8 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
| CVE-2021-31885US | high7.5 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
| CVE-2021-31884US | critical9.8 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
| CVE-2021-31883US | high7.5 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP ACK mes… | ||||
| CVE-2021-31882US | high7.5 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). The DHCP client application do… | ||||
| CVE-2021-31881US | high7.5 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP OFFER m… | ||||
| CVE-2021-31346US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31345US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31344US | medium5.3 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
references
External citations — patches, advisories, analysis.
- SSA-044112: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS - CSAF Versionself
- SSA-044112: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS - PDF Versionself
- SSA-044112: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS - TXT Versionself
- ICS Advisory ICSA-21-313-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-313-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (56)
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V4
Update to V4.1.1 or later version
https://support.sw.siemens.com/en-US/product/1336134128/ - FixedNucleus ReadyStart V4
Update to V4.1.1 or later version
https://support.sw.siemens.com/en-US/product/1336134128/ - FixedNucleus ReadyStart V4
Update to V4.1.1 or later version
https://support.sw.siemens.com/en-US/product/1336134128/ - FixedNucleus ReadyStart V4
Update to V4.1.1 or later version
https://support.sw.siemens.com/en-US/product/1336134128/ - FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan