Skip to content
OpenAdvisories
High ICSA-21-350-06 8 CVEs

Siemens Capital VSTAR

Published Dec 14, 2021 · Updated May 6, 2025 · Revision 5

Vendor: Siemens Product: Capital Embedded AR Classic 431-422 Product: Capital Embedded AR Classic R20-11

Summary

Multiple vulnerabilities (also known as "NUCLEUS:13") have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112:
https://cert-portal.siemens.com/productcert/html/ssa-044112.html.
Capital Embedded AR Classic uses an affected version of the Nucleus software and inherently contains several of these vulnerabilities.

Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 8

Revision history

  1. #5

    Revision - Fixing typos

  2. #4

    Updated remediation of Capital Embedded AR Classic 431-422 as no fix planned

  3. #3

    Renamed Capital VSTAR to Capital Embedded AR Classic; added fix for version line R20-11

  4. #2

    Removed CVE-2021-31884 as Capital VSTAR is not affected

  5. #1

    Publication Date

References