CVE-2020-27738

CVE-2020-27738 concerns the DNS domain name record decompression in Siemens APOGEE PXC/TALON, Nucleus, SIMOTICS CONNECT 400 and related DNS modules. The issue is improper validation of pointer offsets during DNS response parsing, which can cause a read past the end of an allocated structure and l...

CVE-2019-13939

CVE-2019-13939 affects Siemens Mentor Nucleus Networking Module family (including APOGEE MEC/MBC/PXC, Desigo PXC, PXM, Nucleus NET/RTOS/ReadyStart, SIMOTICS/TALON, VSTAR) across numerous versions. The root cause is improper handling of DHCP packets: when the DHCP client is enabled, an attacker se...

CVE-2020-27737

Siemens APOGEE PXC, Nucleus and TALON/SIMOTICS products are affected by a DNS response parsing vulnerability that can read past allocated memory when processing malformed DNS responses. A privileged attacker on the network could cause a denial of service or memory leakage. Remediation is to updat...

CVE-2020-27736

Summary (supported): CVE-2020-27736 affects Siemens APOGEE PXC (BACnet and P2 Ethernet), Nucleus NET/ReadyStart/Source Code, SIMOTICS CONNECT 400, TALON TC (and related Nucleus/DNS modules). The vulnerability stems from improper validation in the DNS domain name label parsing of DNS responses, wh...

CVE-2021-25677

CVE-2021-25677 concerns DNS transaction ID randomness in Siemens DNS clients across multiple products (APOGEE PXC BACnet/P2 Ethernet, Nucleus NET/ReadyStart, SIMOTICS CONNECT 400, TALON TC). Root cause: DNS client does not properly randomize transaction IDs, enabling potential DNS cache poisoning...