Description
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions). The total length of an UDP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on a user-defined applications that runs on top of the UDP protocol. (FSMD-2021-0006)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Capital Embedded AR Classic 431-422 | — | — |
| Siemens | Capital Embedded AR Classic R20-11 | < V2303 | V2303 |
| Siemens | PLUSCONTROL 1st Gen | All versions | — |
Advisories 9
- ICSA-22-013-03 Siemens Energy PLUSCONTROL CISA ICS & IT advisories · May 6, 2025
- ICSA-21-350-06 Siemens Capital VSTAR CISA ICS & IT advisories · May 6, 2025
- ICSA-21-315-07 Siemens Nucleus RTOS-based APOGEE and TALON Products (Update C) CISA ICS & IT advisories · May 6, 2025
- ICSA-21-313-03 Siemens Nucleus RTOS TCP/IP Stack CISA ICS & IT advisories · May 6, 2025
- SSA-620288 SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic Siemens ProductCERT · Mar 11, 2025
- SSA-114589 SSA-114589: Multiple Vulnerabilities in Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products Siemens ProductCERT · May 10, 2022
- SSA-845392 SSA-845392: Multiple Vulnerabilities in Nucleus RTOS based Siemens Energy PLUSCONTROL 1st Gen Devices Siemens ProductCERT · Jan 11, 2022
- SSA-044112 SSA-044112: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS Siemens ProductCERT · Dec 14, 2021
- VDE-2021-050 WAGO: Multiple devices affected by Vulnerabilities in NUCLEUS TCP Stack. CERT@VDE · Nov 16, 2021
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-114589.html
- https://cert-portal.siemens.com/productcert/html/ssa-044112.html
- https://cert-portal.siemens.com/productcert/html/ssa-620288.html
- https://cert-portal.siemens.com/productcert/html/ssa-845392.html