Lucene search
SiemensCVELIST:CVE-2021-27393HistoryApr 22, 2021 - 8:42 p.m.
CVE-2021-27393
2021-04-2220:42:21
CWE-330
siemens
www.cve.org
6
vulnerability
nucleus net
nucleus readystart v3
dns cache poisoning
dns resolving spoofing
udp port numbers
A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.
CNA Affected
[
{
"product": "Nucleus NET",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"product": "Nucleus ReadyStart V3",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions < V2013.08"
}
]
},
{
"product": "Nucleus Source Code",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "Versions including affected DNS modules"
}
]
}
]Related
ics
ics
Siemens Nucleus DNS (Update A)
2022-01-13 12:00:00
cve
cve
CVE-2021-27393
2021-04-22 21:15:10
nvd
nvd
CVE-2021-27393
2021-04-22 21:15:10
prion
prion
Code injection
2021-04-22 21:15:00