Siemens Nucleus Products IPv6 Stack
The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-25664US | high7.5 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nu… | ||||
| CVE-2021-25663US | medium5.0 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nu… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - CSAF Versionself
- SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS - HTML Versionself
- ICS Advisory ICSA-21-103-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-103-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (18)
- MitigationCapital Embedded AR Classic 431-422
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic 431-422
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationNucleus NET
Contact customer support or your local Nucleus Sales team for mitigation advice
- Kein Fix geplantCapital Embedded AR Classic 431-422
Currently no fix is planned
- Kein Fix geplantCapital Embedded AR Classic 431-422
Currently no fix is planned
- Kein Fix geplantNucleus NET
Currently no fix is planned
- Kein Fix geplantNucleus NET
Currently no fix is planned
- BehobenCapital Embedded AR Classic R20-11
Update to V2303 or later version
- BehobenCapital Embedded AR Classic R20-11
Update to V2303 or later version
- BehobenNucleus ReadyStart V3
Update to V2017.02.4 or later version
- BehobenNucleus ReadyStart V3
Update to V2017.02.4 or later version
- BehobenNucleus ReadyStart V4
Update to V4.1.0 or later version
- BehobenNucleus ReadyStart V4
Update to V4.1.0 or later version
- BehobenNucleus Source Code
Contact customer support to receive patch and update information
- BehobenNucleus Source Code
Contact customer support to receive patch and update information
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan