SSA-705111: Multiple Vulnerabilities (NAME:WRECK) in the DNS Module of Nucleus RTOS
Security researchers discovered and disclosed 9 vulnerabilities in several DNS implementations, also known as “NAME:WRECK” vulnerabilities. The vulnerabilities described in this advisory are from this set. The DNS client of affected products contains multiple vulnerabilities related to the handling of DNS responses and requests. The most severe could allow an attacker to manipulate the DNS responses and cause a denial-of-service condition. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-25677US | medium5.3OT elevated | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
| CVE-2020-27738US | high7.4 | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
| CVE-2020-27737US | medium6.5 | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
| CVE-2020-27736US | medium6.5 | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
references
External citations — patches, advisories, analysis.
- SSA-705111: Multiple Vulnerabilities (NAME:WRECK) in the DNS Module of Nucleus RTOS - CSAF Versionself
- SSA-705111: Multiple Vulnerabilities (NAME:WRECK) in the DNS Module of Nucleus RTOS - PDF Versionself
- SSA-705111: Multiple Vulnerabilities (NAME:WRECK) in the DNS Module of Nucleus RTOS - TXT Versionself
remediations (32)
- MitigationNucleus NET
Avoid using DNS client of affected versions
- MitigationNucleus NET
Avoid using DNS client of affected versions
- MitigationNucleus NET
Avoid using DNS client of affected versions
- MitigationNucleus NET
Avoid using DNS client of affected versions
- MitigationNucleus ReadyStart V3
Avoid using DNS client of affected versions
- MitigationNucleus ReadyStart V3
Avoid using DNS client of affected versions
- MitigationNucleus ReadyStart V3
Avoid using DNS client of affected versions
- MitigationNucleus ReadyStart V3
Avoid using DNS client of affected versions
- MitigationNucleus ReadyStart V4
Avoid using DNS client of affected versions
- MitigationNucleus ReadyStart V4
Avoid using DNS client of affected versions
- MitigationNucleus ReadyStart V4
Avoid using DNS client of affected versions
- MitigationNucleus ReadyStart V4
Avoid using DNS client of affected versions
- MitigationNucleus Source Code
Avoid using DNS client of affected versions
- MitigationNucleus Source Code
Avoid using DNS client of affected versions
- MitigationNucleus Source Code
Avoid using DNS client of affected versions
- MitigationNucleus Source Code
Avoid using DNS client of affected versions
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- No fix plannedNucleus NET
Currently no remediation is planned
- FixedNucleus ReadyStart V3
Update to V2017.02.3 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.3 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.3 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V3
Update to V2017.02.3 or later version
https://support.sw.siemens.com/en-US/product/1009925838/ - FixedNucleus ReadyStart V4
Update to V4.1.0 or later version
https://support.sw.siemens.com/en-US/product/1336134128/ - FixedNucleus ReadyStart V4
Update to V4.1.0 or later version
https://support.sw.siemens.com/en-US/product/1336134128/ - FixedNucleus ReadyStart V4
Update to V4.1.0 or later version
https://support.sw.siemens.com/en-US/product/1336134128/ - FixedNucleus ReadyStart V4
Update to V4.1.0 or later version
https://support.sw.siemens.com/en-US/product/1336134128/ - FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan