CVE-2021-25663
mediumpriority · track · 21EPSS 0.019 · 79 %ileDEEUUSEPSS · scored 2026-10-27
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedCapital Embedded AR Classic R20-11siemens_psirt
Update to V2303 or later version
- FixedNucleus ReadyStart V3siemens_psirt
Update to V2017.02.4 or later version
- FixedNucleus ReadyStart V4siemens_psirt
Update to V4.1.0 or later version
- FixedNucleus Source Codesiemens_psirt
Contact customer support to receive patch and update information
- FixedCapital Embedded AR Classic R20-11cisa_csaf_ot
Update to V2303 or later version
- FixedNucleus ReadyStart V3cisa_csaf_ot
Update to V2017.02.4 or later version
- FixedNucleus ReadyStart V4cisa_csaf_ot
Update to V4.1.0 or later version
- FixedNucleus Source Codecisa_csaf_ot
Contact customer support to receive patch and update information
- MitigationCapital Embedded AR Classic 431-422siemens_psirt
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11siemens_psirt
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationNucleus NETsiemens_psirt
Contact customer support or your local Nucleus Sales team for mitigation advice
- MitigationCapital Embedded AR Classic 431-422cisa_csaf_ot
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationCapital Embedded AR Classic R20-11cisa_csaf_ot
Disable IPv6 functionality, if feature not used, by deselecting the TcpIpIpV6General/IpV6Enabled Pre-Compile configuration option
- MitigationNucleus NETcisa_csaf_ot
Contact customer support or your local Nucleus Sales team for mitigation advice
- No fix plannedCapital Embedded AR Classic 431-422siemens_psirt
Currently no fix is planned
- No fix plannedNucleus NETsiemens_psirt
Currently no fix is planned
- No fix plannedCapital Embedded AR Classic 431-422cisa_csaf_ot
Currently no fix is planned
- No fix plannedNucleus NETcisa_csaf_ot
Currently no fix is planned
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–8.7
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (33)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- SSA-248289SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS2021-04-13csaf · siemens_psirtDE
The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
- WID-SEC-W-2023-1986NAME:WRECK: Mehrere Schwachstellen in TCP/IP StacksDeutsch2021-04-15csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens Nucleus Net, Siemens Nucleus RTOS, Microsoft Azure RTOS NetX und Wind River VxWorks ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder einen Denial of Service zu verursachen.
- ICSA-21-103-05Siemens Nucleus Products IPv6 Stack2021-04-13icsa · cisa_csaf_otUS
The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (12)
External citations — patches, advisories, analysis.
- https://cert-portal.siemens.com/productcert/html/ssa-248289.htmlcnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdfcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2021-25663cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.1245cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2021041414cnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-248289.htmlenisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdfenisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan