Skip to content
OpenAdvisories
Unscored SEVD-2021-217-01 5 CVEs

NicheStack TCP/IP Vulnerabilities (INFRA:HALT) in Lexium ILE, ILA, ILS, and Communication Option Boards for Altivar and Lexium32 drives

Published Aug 5, 2021 · Updated May 9, 2023 · Revision 5

Vendor: Schneider Electric Product: Altivar 32/320 and Lexium 32 Ethernet TCP/IP communication module (VW3A3616) Product: Altivar 32/320/340/600/900 Profinet communication module (VW3A3627) Product: Altivar 61/71 Profinet communication card (VW3A3327) Product: Lexium ILE ILA ILS communication drive

Summary

Schneider Electric is aware of multiple vulnerabilities in HCC Embedded’s NicheStack TCP/IP third party component, which is integrated into Schneider Electric’s Lexium ILE, ILA, ILS, Altivar Profinet Communication Module (VW3A3627), Altivar and Lexium Ethernet TCP/IP Communication Module (VW3A3616), and Altivar Profinet - Communication Card (VW3A3327) products.
Failure to apply the mitigations provided below may risk denial of service of the drives.
February 2023 Update: A remediation is available for Altivar 32/320/340/600/900 Profinet communication module (VW3A3627)

Vulnerabilities 5

  • Unscored —
    CVE-2020-35683

    An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP…

  • Unscored —
    CVE-2020-35684

    An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP …

  • Unscored —
    CVE-2020-35685

    An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connecti…

  • Unscored —
    CVE-2021-31400

    An issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1. The TCP out-of-band urgent…

  • Unscored —
    CVE-2021-31401

    An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn'…

Revision history

  1. #5.0.0

    A remediation is available for Altivar 32/320 & Lexium 32 Ethernet TCP/IP communication module (VW3A3616)

  2. #4.0.0

    A remediation is available for Altivar 32/320/340/600/900 Profinet communication module (VW3A3627)

  3. #3.0.0

    A remediation is available for Lexium ILE, ILA, ILS drives and the affected communication module firmware version has been updated.

  4. #2.0.0

    Added Altivar Profinet Communication Module (VW3A3627), Lexium Ethernet TCP/IP Communication Module (VW3A3616), and Altivar Profinet - Communication Card (VW3A3327) to the list of affected products.

  5. #1.0.0

    Original Release

References