PT-2021-6242 · Siemens+1 · Capital Vstar+11

Amine Amri + 5 · Published 2021-11-09 · Updated 2024-10-08 · CVE-2021-31889

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions Capital Embedded AR Classic 431-422 versions all Capital Embedded AR Classic R20-11 versions prior to V2303 PLUSCONTROL 1st Gen versions all SIMOTICS CONNECT 400 versions prior to V0.5.0.0 APOGEE MBC versions all APOGEE MEC versions all APOGEE PXC versions all TALON TC versions all Nucleus NET versions all Nucleus ReadyStart V3 versions prior to V2017.02.4 Nucleus Source Code versions all Capital VSTAR versions all

Description A vulnerability has been identified that is related to errors in processing the SACK parameter of TCP packets. This can lead to Information Leaks and Denial-of-Service conditions when malformed TCP packets with a corrupted SACK option are sent. The issue can be exploited remotely.

Recommendations For Capital Embedded AR Classic 431-422, update to a version that fixes the issue. For Capital Embedded AR Classic R20-11, update to version V2303 or later. For PLUSCONTROL 1st Gen, consider disabling the use of TCP packets with the SACK option until a patch is available. For SIMOTICS CONNECT 400, update to version V0.5.0.0 or later. For APOGEE MBC, APOGEE MEC, APOGEE PXC, and TALON TC, restrict access to the SACK parameter in TCP packets to minimize the risk of exploitation. For Nucleus NET, Nucleus ReadyStart V3, and Nucleus Source Code, update to a version that fixes the issue or apply configuration changes to mitigate the risk. For Capital VSTAR, update to a version that fixes the issue or consider temporarily disabling the vulnerable component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability for some of the affected products.

Fix

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

ASB-A-207646334

ASB-A-207646335

ASB-A-207646336

BDU:2022-01172

CVE-2021-31889

M-MOLY00756840

Affected Products

Apogee Mbc

Apogee Mec

Apogee Pxc

Capital Embedded Ar Classic 431-422

Capital Embedded Ar Classic R20-11

Capital Vstar

Nucleus Net

Nucleus Readystart V3

Nucleus Source Code

Pluscontrol 1St Gen

Simotics Connect 400

Talon Tc

References · 18

• https://nvd.nist.gov/vuln/detail/CVE-2021-31889 · Security Note
• https://osv.dev/vulnerability/ASB-A-207646334 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-207646336 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-31889 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01172 · Security Note
• https://osv.dev/vulnerability/ASB-A-207646335 · Vendor Advisory
• https://t.me/cibsecurity/32043 · Telegram Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf · Note
• https://source.android.com/security/bulletin/2022-01-01 · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-223353.pdf · Note
• https://cert-portal.siemens.com/productcert/html/ssa-620288.html · Note
• https://cert-portal.siemens.com/productcert/html/ssa-223353.html · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf · Note