NAME:WRECK: Mehrere Schwachstellen in TCP/IP Stacks

Summary

Product

Vulnerabilities 10

• High 8.1
  CVE-2020-15795

  A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…

  Siemens APOGEE PXC Modular (P2 Ethernet) TALON TC Modular (BACnet) APOGEE PXC Compact (BACnet) ICS / OT
  Apr 22, 2021
• High 8.1
  CVE-2020-27009

  A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…

  Siemens APOGEE PXC Modular (BACnet) TALON TC Compact (BACnet) APOGEE PXC Compact (P2 Ethernet) ICS / OT
  Apr 22, 2021
• High 7.5
  CVE-2021-25663

  A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

  Siemens Nucleus Source Code Nucleus NET Nucleus ReadyStart V3 ICS / OT
  Apr 22, 2021
• High 7.5
  CVE-2021-25664

  A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

  Siemens Nucleus Source Code Nucleus NET Nucleus ReadyStart V3 ICS / OT
  Apr 22, 2021
• Medium 6.5
  CVE-2020-27736

  A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…

  Siemens APOGEE PXC Modular (P2 Ethernet) TALON TC Modular (BACnet) APOGEE PXC Compact (BACnet) ICS / OT
  Apr 22, 2021
• Medium 6.5
  CVE-2020-27737

  A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…

  Siemens APOGEE PXC Compact (BACnet) APOGEE PXC Modular (BACnet) TALON TC Compact (BACnet) ICS / OT
  Apr 22, 2021
• Medium 6.5
  CVE-2020-27738

  A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…

  Siemens APOGEE PXC Compact (P2 Ethernet) APOGEE PXC Modular (P2 Ethernet) TALON TC Modular (BACnet) ICS / OT
  Apr 22, 2021
• Medium 5.3
  CVE-2021-25677

  A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…

  Siemens TALON TC Modular (BACnet) APOGEE PXC Compact (BACnet) APOGEE PXC Modular (BACnet) ICS / OT
  Apr 22, 2021
• Unscored —
  CVE-2016-20009

  A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This v…

  Mar 11, 2021
• Unscored —
  CVE-2021-27393

  A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nuc…

  Siemens Nucleus Source Code Nucleus NET Nucleus ReadyStart V3 ICS / OT
  Apr 22, 2021

Revision history

1. 2024-02-12 #5

   Neue Updates von Siemens aufgenommen

2. 2023-08-07 #4

   Neue Updates von Siemens aufgenommen

3. 2021-11-08 #3

   Neue Updates von Siemens aufgenommen

4. 2021-05-02 #2

   CVE's ergänzt

5. 2021-04-15 #1

   Initiale Fassung

References

• Forescout Report vom 2021-04-15
  https://www.forescout.com/company/resources/namewreck-breaking-and-fixing-dns-implementations/
• Siemens Security Advisory by Siemens ProductCERT
  https://cert-portal.siemens.com/productcert/pdf/ssa-185699.pdf
• Siemens Security Advisory by Siemens ProductCERT
  https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf
• Siemens Security Advisory SSA-180579 vom 2023-08-08
  https://cert-portal.siemens.com/productcert/html/ssa-180579.html
• Siemens Security Advisory SSA-248289 vom 2024-02-13
  https://cert-portal.siemens.com/productcert/html/ssa-248289.html