PT-2021-2649 · Siemens+1 · Apogee Pxc Modular+7

Published 2021-04-14 · Updated 2023-08-08 · CVE-2021-25677

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions APOGEE PXC Compact (BACnet) versions prior to V3.5.5 APOGEE PXC Compact (P2 Ethernet) versions prior to V2.8.20 APOGEE PXC Modular (BACnet) versions prior to V3.5.5 APOGEE PXC Modular (P2 Ethernet) versions prior to V2.8.20 Nucleus NET (affected versions not specified) Nucleus ReadyStart V3 versions prior to V2017.02.4 Nucleus ReadyStart V4 versions prior to V4.1.0 Nucleus Source Code (affected versions not specified) SIMOTICS CONNECT 400 versions prior to V1.0.0.0 TALON TC Compact (BACnet) versions prior to V3.5.5 TALON TC Modular (BACnet) versions prior to V3.5.5

Description The DNS client does not properly randomize DNS transaction IDs, which could allow an attacker to poison the DNS cache or spoof DNS resolving. This issue may enable a remote attacker to impact data integrity.

Recommendations For APOGEE PXC Compact (BACnet) versions prior to V3.5.5, update to version V3.5.5 or later. For APOGEE PXC Compact (P2 Ethernet) versions prior to V2.8.20, update to version V2.8.20 or later. For APOGEE PXC Modular (BACnet) versions prior to V3.5.5, update to version V3.5.5 or later. For APOGEE PXC Modular (P2 Ethernet) versions prior to V2.8.20, update to version V2.8.20 or later. For Nucleus NET, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Nucleus ReadyStart V3 versions prior to V2017.02.4, update to version V2017.02.4 or later. For Nucleus ReadyStart V4 versions prior to V4.1.0, update to version V4.1.0 or later. For Nucleus Source Code, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For SIMOTICS CONNECT 400 versions prior to V1.0.0.0, update to version V1.0.0.0 or later. For TALON TC Compact (BACnet) versions prior to V3.5.5, update to version V3.5.5 or later. For TALON TC Modular (BACnet) versions prior to V3.5.5, update to version V3.5.5 or later.

Use of Insufficiently Random Values

Access of Memory Location After End of Buffer

Weakness Enumeration

CWE-330

CWE-788

Related Identifiers

BDU:2021-02175

CVE-2021-25677

Affected Products

Apogee Pxc Compact

Apogee Pxc Modular

Nucleus Net

Nucleus Readystart

Nucleus Source Code

Simotics Connect 400

Talon Tc Compact

Talon Tc Modular

References · 9

• https://cert-portal.siemens.com/productcert/pdf/ssa-669158.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02175 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25677 · Security Note
• https://osv.dev/vulnerability/CVE-2021-25677 · Vendor Advisory
• https://securitylab.ru/news/518760.php · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf · Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-103-13 · Note
• https://cybersecurity-help.cz/vdb/SB2021041406 · Note