CVE-2016-20009

highpriority · track · 40stack campaign · NAME:WRECKEPSS 0.019 · 79 %ileDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.86% (79th) EPSS

CVSS 7.5 · high

Is it mine?

36 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · auma_psirt · cert_bund

EPSS · scored 2026-10-23

A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSGT-100siemens_psirt
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedSGT-200siemens_psirt
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedSGT-300siemens_psirt
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedSGT-400siemens_psirt
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedSGT-A20siemens_psirt
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedSGT-A35siemens_psirt
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedSGT-A65siemens_psirt
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedFirmware <v2.6 installed on SIMA² Master Stationauma_psirt
The described vulnerabilities have been fixed in the SIMA² Master Stations with software version V 2.6 or higher. SIMA² Master Stations with software versions < V 2.6 can be upgraded. AUMA recommends applying a product update at the earliest convenience.
FixedSGT-100cisa_csaf_ot
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedSGT-200cisa_csaf_ot
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedSGT-300cisa_csaf_ot
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedSGT-400cisa_csaf_ot
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedSGT-A20cisa_csaf_ot
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedSGT-A35cisa_csaf_ot
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
FixedSGT-A65cisa_csaf_ot
As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.
MitigationSGT-100siemens_psirt
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationSGT-200siemens_psirt
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationSGT-300siemens_psirt
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationSGT-400siemens_psirt
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationSGT-A20siemens_psirt
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationSGT-A35siemens_psirt
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationSGT-A65siemens_psirt
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationFirmware <v2.6 installed on SIMA² Master Stationauma_psirt
In case you cannot upgrade your SIMA² Master Station to software Version 2.6 or above, it is recommended to configure the use of internal DNS servers only and block external DNS traffic where possible. It is also recommended to segment networks and shield affected devices from untrusted networks, e.g., using firewalls. Network intrusion detection mechanisms can be used to filter malicious packets.
MitigationSGT-100cisa_csaf_ot
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationSGT-200cisa_csaf_ot
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationSGT-300cisa_csaf_ot
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationSGT-400cisa_csaf_ot
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationSGT-A20cisa_csaf_ot
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationSGT-A35cisa_csaf_ot
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)
MitigationSGT-A65cisa_csaf_ot
For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Csecondary · CISA US

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · AUMA PSIRT

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-787USprimaryCWE-787USCWE-787USCWE-787US

affected products (36)

Products and version ranges known to be affected.

Firmware <v2.6 installed on SIMA² Master Stationall versionsauma_psirtDE
Firmware v2.6 installed on SIMA² Master Stationall versionsfixedauma_psirtDE
Microsoft Azure RTOS NetXall versionscert_bundDEcpe:/o:microsoft:azure_rtos_netx:-
Siemens Nucleus Netall versionscert_bundDEcpe:/a:siemens:nucleus_net:-
Siemens Nucleus RTOSall versionscert_bundDEcpe:/o:siemens:nucleus_rtos:-
Wind River VxWorksall versionscert_bundDEcpe:/o:windriver:vxworks:-
SGT-100all versionscisa_csaf_otUS
SGT-200all versionscisa_csaf_otUS
SGT-300all versionscisa_csaf_otUS
SGT-400all versionscisa_csaf_otUS
SGT-A20all versionscisa_csaf_otUS
SGT-A35all versionscisa_csaf_otUS
SGT-A65all versionscisa_csaf_otUS
Siemens SGT-100≤ vers:all/*cisa_csaf_otUS
Siemens SGT-200≤ vers:all/*cisa_csaf_otUS
Siemens SGT-300≤ vers:all/*cisa_csaf_otUS
Siemens SGT-400≤ vers:all/*cisa_csaf_otUS
Siemens SGT-A20≤ vers:all/*cisa_csaf_otUS
Siemens SGT-A35≤ vers:all/*cisa_csaf_otUS
Siemens SGT-A65≤ vers:all/*cisa_csaf_otUS

showing 20 of 36

advisories (4)

Vendor and ecosystem advisories describing this.

SSA-553445SSA-553445: DNS "Name:Wreck" Vulnerabilities in Multiple Siemens Energy AGT and SGT solutions2021-08-10csaf · siemens_psirtDE
One of the DNS-related vulnerabilities that were reported as "Name:Wreck" may affect the following Siemens Energy products: - Industrial Gas Turbines SGT-100, SGT-200, SGT-300 and SGT-400 with Allen Bradley control systems - Aeroderivative Gas Turbines SGT-A20, SGT-A35 and SGT-A65 with FT125 control systems
VDE-2023-028AUMA: SIMA Master Station affected by WRECK vulnerability2023-08-07csaf · auma_psirtDE
Forescout Research Labs, partnering with JSOF Research, disclosed NAME:WRECK, a set of Domain Name System (DNS) vulnerabilities that have the potential to cause either Denial of Service (DoS) or Remote Code Execution, allowing attackers to take targeted devices offline or to gain control over them. The vulnerability could be exploited by an attacker on the same network or on a remote network by spoofing packets.
WID-SEC-W-2023-1986NAME:WRECK: Mehrere Schwachstellen in TCP/IP StacksDeutsch2021-04-15csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens Nucleus Net, Siemens Nucleus RTOS, Microsoft Azure RTOS NetX und Wind River VxWorks ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder einen Denial of Service zu verursachen.
ICSA-21-222-06Siemens Energy AGT and SGT Solutions2021-08-10icsa · cisa_csaf_otUS
One of the DNS-related vulnerabilities that were reported as "Name:Wreck" may affect the following Siemens Energy products: - Industrial Gas Turbines SGT-100, SGT-200, SGT-300 and SGT-400 with Allen Bradley control systems - Aeroderivative Gas Turbines SGT-A20, SGT-A35 and SGT-A65 with FT125 control systems

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd auma_psirt cert_bund cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2021-03-11modified 2026-06-17

related (16,033)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-86950US	—OT critical	1.24% (69th)	KEV	2026-09-28
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing…
CVE-2026-87491US	—OT critical	3.14% (88th)	KEV	2026-09-09
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security…
CVE-2026-53362US	—OT critical	0.71% (53rd)	KEV	2026-07-04
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branc…
CVE-2026-53266US	—OT critical	0.83% (57th)	KEV	2026-06-25
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source addre…
CVE-2026-11645US	—OT critical	2.44% (84th)	KEV	2026-06-09
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium…

+16028 more

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan