CVE-2021-25677
Description
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (Versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions >= V0.5.0.0 < V1.0.0.0), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). The DNS client does not properly randomize DNS transaction IDs. That could allow an attacker to poison the DNS cache or spoof DNS resolving.
Affected products
20- Range: < V3.5.5
- Range: < V3.5.5
- Range: < V3.5.5
(expand)+ 1 more
- (no CPE)
- (no CPE)range: All versions
< V1.0.0.0+ 1 more
- (no CPE)range: < V1.0.0.0
- (no CPE)range: All versions >= V0.5.0.0 < V1.0.0.0
(expand)+ 1 more
- (no CPE)
- (no CPE)range: Versions including affected DNS modules
- Range: < V2017.02.4
- Range: < V4.1.0
- Range: < V3.5.5
- Range: All versions < V3.5.5
- Range: All versions < V2.8.20
- Range: All versions < V3.5.5
- Range: All versions < V2.8.20
All versions < V2017.02.4+ 1 more
- (no CPE)range: All versions < V2017.02.4
- (no CPE)range: All versions < V4.1.0
- Range: All versions < V3.5.5
- Range: All versions < V3.5.5
Patches
Vulnerability mechanics
References
3- cert-portal.siemens.com/productcert/pdf/ssa-669158.pdfnvdPatchVendor Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-705111.pdfnvdPatchVendor Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-180579.pdfnvd
News mentions
0No linked articles in our index yet.