High ICSA-22-013-03 6 CVEs

Siemens Energy PLUSCONTROL

Published Jan 11, 2022 · Updated May 6, 2025 · Revision 2

Vendor: Siemens Product: PLUSCONTROL 1st Gen

Summary

Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf.

PLUSCONTROL 1st Gen devices are affected by some of the vulnerabilities as documented below.

Siemens Energy recommends specific countermeasures for products where updates are not available.

Vulnerabilities 6

High 8.2

CVE-2021-31346

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11 SIMOTICS CONNECT 400 ICS / OT

Nov 9, 2021
High 7.5

CVE-2021-31345

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11 PLUSCONTROL 1st Gen ICS / OT

Nov 9, 2021
High 7.5

CVE-2021-31889

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11 SIMOTICS CONNECT 400 ICS / OT

Nov 9, 2021
High 7.5

CVE-2021-31890

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 SIMOTICS CONNECT 400 ICS / OT

Nov 9, 2021
Medium 5.3

CVE-2021-31344

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 SIMOTICS CONNECT 400 ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-31885

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens TALON TC Modular (BACnet) APOGEE PXC Compact (BACnet) APOGEE PXC Modular (BACnet) ICS / OT

Nov 9, 2021

Revision history

2025-05-06 #2
Revision - Fixing typos
2022-01-11 #1
Publication Date

References

SSA-845392: Multiple Vulnerabilities in Nucleus RTOS based Siemens Energy PLUSCONTROL 1st Gen Devices - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-845392.txt
SSA-845392: Multiple Vulnerabilities in Nucleus RTOS based Siemens Energy PLUSCONTROL 1st Gen Devices - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf
ICS Advisory ICSA-22-013-03 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-013-03
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B