CVE-2021-25663
mediumPriorität · verfolgen · 21EPSS 0.019 · 79. PerzentilDEEUUSEPSS · bewertet 2026-10-27
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenCapital Embedded AR Classic R20-11siemens_psirt
Update to V2303 or later version
- BehobenNucleus ReadyStart V3siemens_psirt
Update to V2017.02.4 or later version
- BehobenNucleus ReadyStart V4siemens_psirt
Update to V4.1.0 or later version
- BehobenNucleus Source Codesiemens_psirt
Contact customer support to receive patch and update information
- BehobenCapital Embedded AR Classic R20-11cisa_csaf_ot
Update to V2303 or later version
- BehobenNucleus ReadyStart V3cisa_csaf_ot
Update to V2017.02.4 or later version
- BehobenNucleus ReadyStart V4cisa_csaf_ot
Update to V4.1.0 or later version
- BehobenNucleus Source Codecisa_csaf_ot
Contact customer support to receive patch and update information
- MitigationCapital Embedded AR Classic 431-422siemens_psirt
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11siemens_psirt
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationNucleus NETsiemens_psirt
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationCapital Embedded AR Classic 431-422cisa_csaf_ot
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11cisa_csaf_ot
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationNucleus NETcisa_csaf_ot
Contact customer support or your local Nucleus Sales team for mitigation advice
- Kein Fix geplantCapital Embedded AR Classic 431-422siemens_psirt
Currently no fix is planned
- Kein Fix geplantNucleus NETsiemens_psirt
Currently no fix is planned
- Kein Fix geplantCapital Embedded AR Classic 431-422cisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantNucleus NETcisa_csaf_ot
Currently no fix is planned
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–8.7
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (33)
Betroffene Produkte und Versionsbereiche.
Advisories (3)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-248289SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS2021-04-13csaf · siemens_psirtDE
The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
- WID-SEC-W-2023-1986NAME:WRECK: Mehrere Schwachstellen in TCP/IP StacksDeutsch2021-04-15csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens Nucleus Net, Siemens Nucleus RTOS, Microsoft Azure RTOS NetX und Wind River VxWorks ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder einen Denial of Service zu verursachen.
- ICSA-21-103-05Siemens Nucleus Products IPv6 Stack2021-04-13icsa · cisa_csaf_otUS
The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (12)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert-portal.siemens.com/productcert/html/ssa-248289.htmlcnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdfcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2021-25663cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.1245cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2021041414cnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-248289.htmlenisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdfenisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan