SSA-313313

csafDEsiemens_psirt

SSA-313313: Denial of Service Vulnerability in the FTP Server of Nucleus RTOS

view advisory published 2022-10-11

The FTP server of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of the FTP server. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-38371UShigh7.5—
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

  • MitigationNucleus NET for Nucleus PLUS V1

    Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.

  • MitigationNucleus NET for Nucleus PLUS V2

    Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.

  • MitigationNucleus ReadyStart V3 V2012

    Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.

  • MitigationNucleus ReadyStart V3 V2017

    Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.

  • MitigationNucleus Source Code

    Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.

  • FixedNucleus NET for Nucleus PLUS V1

    Update to V5.2a as available in Nucleus PLUS V1.15 and apply the patch "v2022.11"

    https://support.sw.siemens.com/en-US/product/852852095/
  • FixedNucleus NET for Nucleus PLUS V2

    Update to V5.4 as available in Nucleus PLUS V2.1f and apply the patch "v2022.11"

    https://support.sw.siemens.com/en-US/product/852852095/
  • FixedNucleus ReadyStart V3 V2012

    Update to V2012.08.1 and apply the patch "v2022.11"

    https://support.sw.siemens.com/en-US/product/1009925838/
  • FixedNucleus ReadyStart V3 V2017

    Update to V2017.02.4 and apply the patch "2017.02.4_patch_CVE-2022-38371"

    https://support.sw.siemens.com/en-US/product/1009925838/
  • FixedNucleus Source Code

    Contact customer support to receive patch and update information

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan