PT-2021-19564 · Unknown · Nucleus Source Code+9

Published 2021-11-09 · Updated 2024-10-08 · CVE-2021-31883

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Capital Embedded AR Classic 431-422 versions prior to V2303 Capital Embedded AR Classic R20-11 versions prior to V2303 APOGEE MBC (PPC) (BACnet) (all versions) APOGEE MBC (PPC) (P2 Ethernet) (all versions) APOGEE MEC (PPC) (BACnet) (all versions) APOGEE MEC (PPC) (P2 Ethernet) (all versions) APOGEE PXC Compact (BACnet) (all versions) APOGEE PXC Compact (P2 Ethernet) (all versions) APOGEE PXC Modular (BACnet) (all versions) APOGEE PXC Modular (P2 Ethernet) (all versions) Capital VSTAR (all versions) Nucleus NET (all versions) Nucleus ReadyStart V3 versions prior to V2017.02.4 Nucleus Source Code (all versions) TALON TC Compact (BACnet) (all versions) TALON TC Modular (BACnet) (all versions)

Description: A Denial-of-Service condition can occur due to the DHCP client application not validating the length of the Vendor option(s) when processing a DHCP ACK message.

Recommendations: For Capital Embedded AR Classic 431-422 and Capital Embedded AR Classic R20-11, update to version V2303 or later. For APOGEE MBC (PPC) (BACnet) and APOGEE MBC (PPC) (P2 Ethernet), consider disabling the DHCP client application until a patch is available. For APOGEE MEC (PPC) (BACnet) and APOGEE MEC (PPC) (P2 Ethernet), restrict access to the DHCP client application until a fix is provided. For APOGEE PXC Compact (BACnet) and APOGEE PXC Compact (P2 Ethernet), avoid using the Vendor option(s) in the DHCP ACK message until the issue is resolved. For APOGEE PXC Modular (BACnet) and APOGEE PXC Modular (P2 Ethernet), temporarily disable the DHCP client application until a patch is available. For Capital VSTAR, Nucleus NET, and Nucleus Source Code, restrict access to the DHCP client application until a fix is provided. For Nucleus ReadyStart V3, update to version V2017.02.4 or later. For TALON TC Compact (BACnet) and TALON TC Modular (BACnet), consider disabling the DHCP client application until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2021-31883

Affected Products

Apogee Mec (Ppc)

Apogee Pxc Compact

Apogee Pxc Modular

Capital Embedded Ar Classic

Capital Vstar

Nucleus Net

Nucleus Readystart V3

Nucleus Source Code

Talon Tc Compact

Talon Tc Modular

References · 9

• https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31883 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-31883 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf · Note
• https://cert-portal.siemens.com/productcert/html/ssa-620288.html · Note
• https://cert-portal.siemens.com/productcert/html/ssa-114589.html · Note
• https://cert-portal.siemens.com/productcert/html/ssa-044112.html · Note
• https://t.me/cibsecurity/32037 · Telegram Post