SSA-223353: Multiple Vulnerabilities in Nucleus RTOS based SIMOTICS CONNECT 400
Multiple vulnerabilities (also known as “NUCLEUS:13”) have been identified in the Nucleus RTOS (real-time operating system), originally reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. SIMOTICS CONNECT 400 devices are affected by some of the vulnerabilities as documented below. Siemens has released an update for the SIMOTICS CONNECT 400 and recommends to update to the latest version.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-31890US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31889US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31346US | critical9.1 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
| CVE-2021-31344US | medium5.3 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- BehobenSIMOTICS CONNECT 400
Update to V0.5.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109778383/ - BehobenSIMOTICS CONNECT 400
Update to V0.5.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109778383/ - BehobenSIMOTICS CONNECT 400
Update to V0.5.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109778383/ - BehobenSIMOTICS CONNECT 400
Update to V0.5.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109778383/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan