Siemens Capital VSTAR
Multiple vulnerabilities (also known as "NUCLEUS:13") have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/html/ssa-044112.html. Capital Embedded AR Classic uses an affected version of the Nucleus software and inherently contains several of these vulnerabilities. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-31890US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31889US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31883US | high7.5 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP ACK mes… | ||||
| CVE-2021-31882US | high7.5 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). The DHCP client application do… | ||||
| CVE-2021-31881US | high7.5 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP OFFER m… | ||||
| CVE-2021-31346US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31345US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31344US | medium5.3 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic - CSAF Versionself
- SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic - HTML Versionself
- ICS Advisory ICSA-21-350-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-350-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (32)
- MitigationCapital Embedded AR Classic 431-422
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic 431-422
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic 431-422
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic 431-422
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic 431-422
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic 431-422
Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic 431-422
Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic 431-422
Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic R20-11
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic R20-11
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic R20-11
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic R20-11
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic R20-11
Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11
Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11
Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option
- Kein Fix geplantCapital Embedded AR Classic 431-422
Currently no fix is planned
- Kein Fix geplantCapital Embedded AR Classic 431-422
Currently no fix is planned
- Kein Fix geplantCapital Embedded AR Classic 431-422
Currently no fix is planned
- Kein Fix geplantCapital Embedded AR Classic 431-422
Currently no fix is planned
- Kein Fix geplantCapital Embedded AR Classic 431-422
Currently no fix is planned
- Kein Fix geplantCapital Embedded AR Classic 431-422
Currently no fix is planned
- Kein Fix geplantCapital Embedded AR Classic 431-422
Currently no fix is planned
- Kein Fix geplantCapital Embedded AR Classic 431-422
Currently no fix is planned
- BehobenCapital Embedded AR Classic R20-11
Update to V2303 or later version
- BehobenCapital Embedded AR Classic R20-11
Update to V2303 or later version
- BehobenCapital Embedded AR Classic R20-11
Update to V2303 or later version
- BehobenCapital Embedded AR Classic R20-11
Update to V2303 or later version
- BehobenCapital Embedded AR Classic R20-11
Update to V2303 or later version
- BehobenCapital Embedded AR Classic R20-11
Update to V2303 or later version
- BehobenCapital Embedded AR Classic R20-11
Update to V2303 or later version
- BehobenCapital Embedded AR Classic R20-11
Update to V2303 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan