SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS
The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-25664US | high7.5 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nu… | ||||
| CVE-2021-25663US | medium5.0 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nu… | ||||
references
External citations — patches, advisories, analysis.
remediations (18)
- MitigationCapital Embedded AR Classic 431-422
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic 431-422
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- No fix plannedCapital Embedded AR Classic 431-422
Currently no fix is planned
- No fix plannedCapital Embedded AR Classic 431-422
Currently no fix is planned
- No fix plannedNucleus NET
Currently no fix is planned
- No fix plannedNucleus NET
Currently no fix is planned
- FixedCapital Embedded AR Classic R20-11
Update to V2303 or later version
- FixedCapital Embedded AR Classic R20-11
Update to V2303 or later version
- FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
- FixedNucleus ReadyStart V3
Update to V2017.02.4 or later version
- FixedNucleus ReadyStart V4
Update to V4.1.0 or later version
- FixedNucleus ReadyStart V4
Update to V4.1.0 or later version
- FixedNucleus Source Code
Contact customer support to receive patch and update information
- FixedNucleus Source Code
Contact customer support to receive patch and update information
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan