DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
NAME:WRECK: Mehrere Schwachstellen in TCP/IP Stacks
Advisory ansehen veröffentlicht 2021-04-15
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens Nucleus Net, Siemens Nucleus RTOS, Microsoft Azure RTOS NetX und Wind River VxWorks ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder einen Denial of Service zu verursachen.
01
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-27393US | medium5.3OT erhöht | — | ||
A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). T… | ||||
| CVE-2021-25677US | medium5.3OT erhöht | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
| CVE-2021-25664US | high7.5 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nu… | ||||
| CVE-2021-25663US | medium5.0 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nu… | ||||
| CVE-2020-27738US | high7.4 | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
| CVE-2020-27737US | medium6.5 | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
| CVE-2020-27736US | medium6.5 | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
| CVE-2020-27009US | high8.1 | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
| CVE-2020-15795US | high8.1 | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
| CVE-2016-20009US | critical9.8 | — | ||
A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer support… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Siemens Security Advisory SSA-180579 vom 2023-08-08external
- Siemens Security Advisory SSA-248289 vom 2024-02-13external
- Siemens Security Advisory by Siemens ProductCERTexternal
- Siemens Security Advisory by Siemens ProductCERTexternal
- WID-SEC-W-2023-1986 - CSAF Versionself
- WID-SEC-2023-1986 - Portal Versionself
- Forescout Report vom 2021-04-15external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan