Description
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). ICMP echo packets with fake IP options allow sending ICMP echo reply messages to arbitrary hosts on the network. (FSMD-2021-0004)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Capital Embedded AR Classic 431-422 | — | — |
| Siemens | Capital Embedded AR Classic R20-11 | < V2303 | V2303 |
| Siemens | PLUSCONTROL 1st Gen | All versions | — |
| Siemens | SIMOTICS CONNECT 400 | All versions < V0.5.0.0, All versions < V1.0.0.0 | — |
Advisories 12
- VDE-2021-059 PHOENIX CONTACT: BLUEMARK X1 / LED / CLED printers utilizing the Siemens Nucleus RTOS TCP/IP Stack CERT@VDE · May 22, 2025
- ICSA-22-069-02 Siemens SIMOTICS CONNECT 400 CISA ICS & IT advisories · May 6, 2025
- ICSA-22-013-03 Siemens Energy PLUSCONTROL CISA ICS & IT advisories · May 6, 2025
- ICSA-21-350-06 Siemens Capital VSTAR CISA ICS & IT advisories · May 6, 2025
- ICSA-21-315-07 Siemens Nucleus RTOS-based APOGEE and TALON Products (Update C) CISA ICS & IT advisories · May 6, 2025
- ICSA-21-313-03 Siemens Nucleus RTOS TCP/IP Stack CISA ICS & IT advisories · May 6, 2025
- SSA-620288 SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic Siemens ProductCERT · Mar 11, 2025
- SSA-114589 SSA-114589: Multiple Vulnerabilities in Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products Siemens ProductCERT · May 10, 2022
- SSA-223353 SSA-223353: Multiple Vulnerabilities in Nucleus RTOS based SIMOTICS CONNECT 400 Siemens ProductCERT · Mar 8, 2022
- SSA-845392 SSA-845392: Multiple Vulnerabilities in Nucleus RTOS based Siemens Energy PLUSCONTROL 1st Gen Devices Siemens ProductCERT · Jan 11, 2022
- SSA-044112 SSA-044112: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS Siemens ProductCERT · Dec 14, 2021
- VDE-2021-050 WAGO: Multiple devices affected by Vulnerabilities in NUCLEUS TCP Stack. CERT@VDE · Nov 16, 2021
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-223353.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-114589.html
- https://cert-portal.siemens.com/productcert/html/ssa-044112.html
- https://cert-portal.siemens.com/productcert/html/ssa-620288.html
- https://cert-portal.siemens.com/productcert/html/ssa-845392.html
- https://cert-portal.siemens.com/productcert/html/ssa-223353.html