Out-of-bounds reading vulnerability in multiple Siemens products

Capital VSTAR is a complete solution. the Nucleus NET module integrates a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device. the Nucleus RTOS is a microkernel-based real-time operating system. A security vulnerability exists in several Siemens products. The vulnerability stems from the fact that when processing DHCP OFFER messages, the DHCP client application does not validate the length of the vendor option, and an attacker could exploit the vulnerability to cause a denial of service condition.