CVE-2021-27393

mediumPriorität · verfolgen · 21OT-Risiko · erhöhtEPSS 0.008 · 55. PerzentilDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.75% (55th) EPSS

CVSS 5 · medium

Is it mine?

19 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · cert_bund · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenNucleus ReadyStart V3siemens_psirt
Update to V2013.08 or later version
https://support.sw.siemens.com/en-US/product/1009925838/
BehobenNucleus Source Codesiemens_psirt
Contact customer support to receive patch and update information
BehobenNucleus ReadyStart V3cisa_csaf_ot
Update to V2013.08 or later version
https://support.sw.siemens.com/en-US/product/1009925838/
BehobenNucleus Source Codecisa_csaf_ot
Contact customer support to receive patch and update information
MitigationNucleus NETsiemens_psirt
Avoid using DNS client of affected versions
MitigationNucleus ReadyStart V3siemens_psirt
Avoid using DNS client of affected versions
MitigationNucleus Source Codesiemens_psirt
Avoid using DNS client of affected versions
MitigationNucleus NETcisa_csaf_ot
Avoid using DNS client of affected versions
MitigationNucleus ReadyStart V3cisa_csaf_ot
Avoid using DNS client of affected versions
MitigationNucleus Source Codecisa_csaf_ot
Avoid using DNS client of affected versions
Kein Fix geplantNucleus NETsiemens_psirt
Currently no remediation is planned
Kein Fix geplantNucleus NETcisa_csaf_ot
Currently no remediation is planned

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.05mediumAV:N/AC:L/Au:N/C:N/I:P/A:Nprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 1.4

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:Csecondary · CISA US

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.14.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-330USCWE-330USCWE-330US

betroffene Produkte (19)

Betroffene Produkte und Versionsbereiche.

Microsoft Azure RTOS NetXalle Versionencert_bundDEcpe:/o:microsoft:azure_rtos_netx:-
Siemens Nucleus Netalle Versionencert_bundDEcpe:/a:siemens:nucleus_net:-
Siemens Nucleus RTOSalle Versionencert_bundDEcpe:/o:siemens:nucleus_rtos:-
Wind River VxWorksalle Versionencert_bundDEcpe:/o:windriver:vxworks:-
Nucleus NETalle Versionencisa_csaf_otUS
Nucleus ReadyStart V3alle Versionencisa_csaf_otUS
Nucleus Source Codealle Versionencisa_csaf_otUS
Siemens Nucleus NET≤ vers:all/*cisa_csaf_otUS
Siemens Nucleus ReadyStart V3< V2013.08cisa_csaf_otUS
Siemens Nucleus Source Code≤ including_affected_DNS_modulescisa_csaf_otUS
Siemens Nucleus NET≤ All versionsenisa_euvdEU
Siemens Nucleus ReadyStart V3All versions → V2013.08enisa_euvdEU
Siemens Nucleus Source Code≤ Versions including affected DNS modulesenisa_euvdEU
siemens nucleus netalle VersionennvdUScpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*
siemens nucleus readystart v3< 2013.08nvdUScpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:*
siemens nucleus source codealle VersionennvdUScpe:2.3:a:siemens:nucleus_source_code:*:*:*:*:*:*:*:*
Siemens Nucleus NET≤ vers:all/*siemens_psirtDE
Siemens Nucleus ReadyStart V3< V2013.08siemens_psirtDE
Siemens Nucleus Source Code≤ Versions including affected DNS modulessiemens_psirtDE

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-201384SSA-201384: Predictable UDP Port Number Vulnerability (NAME:WRECK) in the DNS Module of Nucleus RTOS2021-04-13csaf · siemens_psirtDE
Security researchers discovered and disclosed 9 vulnerabilities in several DNS implementations, also known as “NAME:WRECK” vulnerabilities. The vulnerability described in this advisory is from this set. The DNS client of of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains a vulnerability related to the handling of UDP port numbers in DNS requests that could allow an attacker to poison the DNS cache or spoof DNS resolving. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available.
WID-SEC-W-2023-1986NAME:WRECK: Mehrere Schwachstellen in TCP/IP StacksDeutsch2021-04-15csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens Nucleus Net, Siemens Nucleus RTOS, Microsoft Azure RTOS NetX und Wind River VxWorks ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder einen Denial of Service zu verursachen.
ICSA-21-103-14Siemens Nucleus DNS (Update A)2021-04-13icsa · cisa_csaf_otUS
Security researchers discovered and disclosed 9 vulnerabilities in several DNS implementations, also known as “NAME:WRECK” vulnerabilities. The vulnerability described in this advisory is from this set. The DNS client of of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains a vulnerability related to the handling of UDP port numbers in DNS requests that could allow an attacker to poison the DNS cache or spoof DNS resolving. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cert_bund cisa_csaf_ot nvd siemens_psirt NVD CVE.org MITRE

veröffentlicht 2021-04-22geändert 2026-06-17

Referenzen (7)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan