SSA-620288

csafDEsiemens_psirt

SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic

Advisory ansehen veröffentlicht 2021-12-14

Multiple vulnerabilities (also known as "NUCLEUS:13") have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/html/ssa-044112.html. Capital Embedded AR Classic uses an affected version of the Nucleus software and inherently contains several of these vulnerabilities. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

01

beschreibt (8)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-31890UScritical9.1—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi…
CVE-2021-31889UScritical9.1—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi…
CVE-2021-31883UShigh7.5—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP ACK mes…
CVE-2021-31882UShigh7.5—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). The DHCP client application do…
CVE-2021-31881UShigh7.5—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP OFFER m…
CVE-2021-31346UScritical9.1—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi…
CVE-2021-31345UScritical9.1—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi…
CVE-2021-31344USmedium5.3—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versi…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (32)

  • MitigationCapital Embedded AR Classic 431-422

    Apply network segmentation and put the ECUs behind properly configured gateways/firewalls

  • MitigationCapital Embedded AR Classic 431-422

    Apply network segmentation and put the ECUs behind properly configured gateways/firewalls

  • MitigationCapital Embedded AR Classic 431-422

    Apply network segmentation and put the ECUs behind properly configured gateways/firewalls

  • MitigationCapital Embedded AR Classic 431-422

    Apply network segmentation and put the ECUs behind properly configured gateways/firewalls

  • MitigationCapital Embedded AR Classic 431-422

    Apply network segmentation and put the ECUs behind properly configured gateways/firewalls

  • MitigationCapital Embedded AR Classic 431-422

    Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option

  • MitigationCapital Embedded AR Classic 431-422

    Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option

  • MitigationCapital Embedded AR Classic 431-422

    Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option

  • MitigationCapital Embedded AR Classic R20-11

    Apply network segmentation and put the ECUs behind properly configured gateways/firewalls

  • MitigationCapital Embedded AR Classic R20-11

    Apply network segmentation and put the ECUs behind properly configured gateways/firewalls

  • MitigationCapital Embedded AR Classic R20-11

    Apply network segmentation and put the ECUs behind properly configured gateways/firewalls

  • MitigationCapital Embedded AR Classic R20-11

    Apply network segmentation and put the ECUs behind properly configured gateways/firewalls

  • MitigationCapital Embedded AR Classic R20-11

    Apply network segmentation and put the ECUs behind properly configured gateways/firewalls

  • MitigationCapital Embedded AR Classic R20-11

    Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option

  • MitigationCapital Embedded AR Classic R20-11

    Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option

  • MitigationCapital Embedded AR Classic R20-11

    Disable DHCP client functionality, if feature not used, by deselecting the TcpIpIpV4General/TcpIpDhcpClientEnabled Pre-Compile configuration option

  • Kein Fix geplantCapital Embedded AR Classic 431-422

    Currently no fix is planned

  • Kein Fix geplantCapital Embedded AR Classic 431-422

    Currently no fix is planned

  • Kein Fix geplantCapital Embedded AR Classic 431-422

    Currently no fix is planned

  • Kein Fix geplantCapital Embedded AR Classic 431-422

    Currently no fix is planned

  • Kein Fix geplantCapital Embedded AR Classic 431-422

    Currently no fix is planned

  • Kein Fix geplantCapital Embedded AR Classic 431-422

    Currently no fix is planned

  • Kein Fix geplantCapital Embedded AR Classic 431-422

    Currently no fix is planned

  • Kein Fix geplantCapital Embedded AR Classic 431-422

    Currently no fix is planned

  • BehobenCapital Embedded AR Classic R20-11

    Update to V2303 or later version

  • BehobenCapital Embedded AR Classic R20-11

    Update to V2303 or later version

  • BehobenCapital Embedded AR Classic R20-11

    Update to V2303 or later version

  • BehobenCapital Embedded AR Classic R20-11

    Update to V2303 or later version

  • BehobenCapital Embedded AR Classic R20-11

    Update to V2303 or later version

  • BehobenCapital Embedded AR Classic R20-11

    Update to V2303 or later version

  • BehobenCapital Embedded AR Classic R20-11

    Update to V2303 or later version

  • BehobenCapital Embedded AR Classic R20-11

    Update to V2303 or later version

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan