PT-2021-2645 · Unknown · Talon Tc Compact+5

Published 2021-04-14 · Updated 2023-08-08 · CVE-2020-27009

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions APOGEE PXC Compact (BACnet) versions prior to V3.5.5 APOGEE PXC Compact (P2 Ethernet) versions prior to V2.8.20 APOGEE PXC Modular (BACnet) versions prior to V3.5.5 APOGEE PXC Modular (P2 Ethernet) versions prior to V2.8.20 Nucleus NET versions prior to V5.2 Nucleus Source Code versions including affected DNS modules TALON TC Compact (BACnet) versions prior to V3.5.5 TALON TC Modular (BACnet) versions prior to V3.5.5

Description The issue is related to the DNS domain name record decompression functionality, which does not properly validate the pointer offset values. This could result in a write past the end of an allocated structure when parsing malformed responses. An attacker with a privileged position in the network could leverage this to execute code in the context of the current process or cause a denial-of-service condition.

Recommendations For APOGEE PXC Compact (BACnet) versions prior to V3.5.5, update to version V3.5.5 or later. For APOGEE PXC Compact (P2 Ethernet) versions prior to V2.8.20, update to version V2.8.20 or later. For APOGEE PXC Modular (BACnet) versions prior to V3.5.5, update to version V3.5.5 or later. For APOGEE PXC Modular (P2 Ethernet) versions prior to V2.8.20, update to version V2.8.20 or later. For Nucleus NET versions prior to V5.2, update to version V5.2 or later. For Nucleus Source Code versions including affected DNS modules, ensure to update the DNS modules to a version that is not affected. For TALON TC Compact (BACnet) versions prior to V3.5.5, update to version V3.5.5 or later. For TALON TC Modular (BACnet) versions prior to V3.5.5, update to version V3.5.5 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-823

CWE-787

Related Identifiers

BDU:2021-02171

CVE-2020-27009

Affected Products

Apogee Pxc Compact

Apogee Pxc Modular

Nucleus Net

Nucleus Source Code

Talon Tc Compact

Talon Tc Modular

References · 8

• https://cert-portal.siemens.com/productcert/pdf/ssa-185699.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02171 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-27009 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27009 · Vendor Advisory
• https://securitylab.ru/news/518760.php · Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-103-04 · Note
• https://cybersecurity-help.cz/vdb/SB2021041409 · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf · Note