Skip to content
OpenAdvisories
High SSA-620288 8 CVEs

SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic

Published Dec 14, 2021 · Updated Mar 11, 2025 · Revision 4

Vendor: Siemens Product: Capital Embedded AR Classic 431-422 Product: Capital Embedded AR Classic R20-11

Summary

Multiple vulnerabilities (also known as "NUCLEUS:13") have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112:
https://cert-portal.siemens.com/productcert/html/ssa-044112.html.
Capital Embedded AR Classic uses an affected version of the Nucleus software and inherently contains several of these vulnerabilities.

Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 8

Revision history

  1. #4

    Updated remediation of Capital Embedded AR Classic 431-422 as no fix planned

  2. #3

    Renamed Capital VSTAR to Capital Embedded AR Classic; added fix for version line R20-11

  3. #2

    Removed CVE-2021-31884 as Capital VSTAR is not affected

  4. #1

    Publication Date

References