CVE-2021-25677
Description
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (Versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions >= V0.5.0.0 < V1.0.0.0), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). The DNS client does not properly randomize DNS transaction IDs. That could allow an attacker to poison the DNS cache or spoof DNS resolving.
Affected products
25All versions < V2017.02.4+ 1 more
- (no CPE)range: All versions < V2017.02.4
- (no CPE)range: All versions < V4.1.0
All versions >= V0.5.0.0 < V1.0.0.0+ 1 more
- (no CPE)range: All versions >= V0.5.0.0 < V1.0.0.0
- (no CPE)range: < V1.0.0.0
- Range: All versions < V3.5.5
- Range: All versions < V3.5.5
- cpe:2.3:o:siemens:simotics_connect_400_firmware:*:*:*:*:*:*:*:*Range: >=0.5.0.0
cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: All versions
- cpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:*Range: <2017.02.4
cpe:2.3:a:siemens:nucleus_readystart_v4:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:siemens:nucleus_readystart_v4:*:*:*:*:*:*:*:*range: <4.1.0
- (no CPE)range: < V4.1.0
cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: Versions including affected DNS modules
- Range: < V3.5.5
- Range: < V3.5.5
- Range: < V3.5.5
- Range: < V3.5.5
- Range: < V2017.02.4
- Range: All versions < V3.5.5
- Range: All versions < V2.8.20
- Range: All versions < V3.5.5
- Range: All versions < V2.8.20
Patches
Vulnerability mechanics
References
3- cert-portal.siemens.com/productcert/pdf/ssa-669158.pdfnvdPatchVendor Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-705111.pdfnvdPatchVendor Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-180579.pdfnvd
News mentions
0No linked articles in our index yet.