Description
A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Nucleus NET | All versions | — |
| Siemens | Nucleus ReadyStart V3 | All versions < V2013.08 | — |
| Siemens | Nucleus Source Code | Versions including affected DNS modules | — |
Advisories 3
- ICSA-21-103-14 Siemens Nucleus DNS (Update A) CISA ICS & IT advisories · May 6, 2025
- WID-SEC-2023-1986 NAME:WRECK: Mehrere Schwachstellen in TCP/IP Stacks BSI CERT-Bund (WID) · Feb 12, 2024
- SSA-201384 SSA-201384: Predictable UDP Port Number Vulnerability (NAME:WRECK) in the DNS Module of Nucleus RTOS Siemens ProductCERT · Jan 11, 2022