SSA-044112

csafDEsiemens_psirt

SSA-044112: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS

Advisory ansehen veröffentlicht 2021-11-09

The TCP/IP stack and related services (FTP, TFTP) of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contain several vulnerabilities, also known as "NUCLEUS:13" and as documented below. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not available.

01

beschreibt (13)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-31890UScritical9.1—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi…
CVE-2021-31889UScritical9.1—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi…
CVE-2021-31888UShigh8.8—
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC…
CVE-2021-31887UShigh8.8—
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC…
CVE-2021-31886UScritical9.8—
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC…
CVE-2021-31885UShigh7.5—
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC…
CVE-2021-31884UScritical9.8—
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC…
CVE-2021-31883UShigh7.5—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP ACK mes…
CVE-2021-31882UShigh7.5—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). The DHCP client application do…
CVE-2021-31881UShigh7.5—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP OFFER m…
CVE-2021-31346UScritical9.1—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi…
CVE-2021-31345UScritical9.1—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi…
CVE-2021-31344USmedium5.3—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (56)

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • MitigationNucleus NET

    Contact customer support or your local Nucleus Sales team for mitigation advice

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • Kein Fix geplantNucleus NET

    Currently no remediation is planned

  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V3

    Update to V2017.02.4 or later version

    https://support.sw.siemens.com/en-US/product/1009925838/
  • BehobenNucleus ReadyStart V4

    Update to V4.1.1 or later version

    https://support.sw.siemens.com/en-US/product/1336134128/
  • BehobenNucleus ReadyStart V4

    Update to V4.1.1 or later version

    https://support.sw.siemens.com/en-US/product/1336134128/
  • BehobenNucleus ReadyStart V4

    Update to V4.1.1 or later version

    https://support.sw.siemens.com/en-US/product/1336134128/
  • BehobenNucleus ReadyStart V4

    Update to V4.1.1 or later version

    https://support.sw.siemens.com/en-US/product/1336134128/
  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

  • BehobenNucleus Source Code

    Contact customer support to receive patch and update information

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan