SSA-201384

csafDEsiemens_psirt

SSA-201384: Predictable UDP Port Number Vulnerability (NAME:WRECK) in the DNS Module of Nucleus RTOS

view advisory published 2021-04-13

Security researchers discovered and disclosed 9 vulnerabilities in several DNS implementations, also known as “NAME:WRECK” vulnerabilities. The vulnerability described in this advisory is from this set. The DNS client of of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains a vulnerability related to the handling of UDP port numbers in DNS requests that could allow an attacker to poison the DNS cache or spoof DNS resolving. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-27393USmedium5.3OT elevated—
A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). T…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationNucleus NET

    Avoid using DNS client of affected versions

  • MitigationNucleus ReadyStart V3

    Avoid using DNS client of affected versions

  • MitigationNucleus Source Code

    Avoid using DNS client of affected versions

  • No fix plannedNucleus NET

    Currently no remediation is planned

  • FixedNucleus ReadyStart V3

    Update to V2013.08 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • FixedNucleus Source Code

    Contact customer support to receive patch and update information

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan