13 New Flaws in Siemens Nucleus TCP/IP Stack Impact Safety-Critical Equipment

🗓️ 10 Nov 2021 10:11:00Reported by The Hacker NewsType

13 New Flaws in Siemens Nucleus TCP/IP Stack Impact Safety-Critical Equipment. Security vulnerabilities in Nucleus TCP/IP stack pose remote code execution, DoS, and information leak risks, impacting 3 billion IoT devices. Siemens released security updates for Nucleus ReadyStart versions to address the weaknesses, primarily deployed in automotive, industrial, and medical applications. Vulnerabilities include a stack-based buffer overflow affecting the FTP server component, posing significant risks to safety-critical devices in healthcare, governmental, retail, financial, and manufacturing sectors

Reporter	Title	Published	Views	Family All 49
ATTACKERKB	CVE-2021-31887	9 Nov 202112:15	–	attackerkb
ATTACKERKB	CVE-2021-31888	9 Nov 202112:15	–	attackerkb
ATTACKERKB	CVE-2021-31886	9 Nov 202112:15	–	attackerkb
BDU FSTEC	The vulnerability of FTP servers for microprogrammed software controllers such as CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus allows a hacker to cause a service failure or execute arbitrary code.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of FTP servers for microprogrammed software controllers such as CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus allows a hacker to cause service failures or execute arbitrary codes.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of FTP servers for microprogrammed software controllers such as CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus allows a hacker to cause service failures or execute arbitrary codes.	20 Apr 202200:00	–	bdu_fstec
Circl	CVE-2021-31886	10 Nov 202116:40	–	circl
Circl	CVE-2021-31887	9 Nov 202114:30	–	circl
Circl	CVE-2021-31888	9 Nov 202114:30	–	circl
CNNVD	Siemens Nucleus ReadyStart 缓冲区错误漏洞	9 Nov 202100:00	–	cnnvd