PT-2021-6896 · Unknown+1 · Capital Vstar+10

Published 2021-11-09 · Updated 2024-10-08 · CVE-2021-31345

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Capital Embedded AR Classic 431-422 versions all Capital Embedded AR Classic R20-11 versions prior to V2303 PLUSCONTROL 1st Gen versions all APOGEE MBC versions all APOGEE MEC versions all APOGEE PXC versions all TALON TC versions all Nucleus NET versions all Nucleus ReadyStart V3 versions prior to V2017.02.4 Nucleus Source Code versions all Capital VSTAR versions all

Description A vulnerability has been identified related to errors in processing the UDP packet header. The total length of a UDP payload, set in the IP header, is unchecked, which may lead to various side effects, including Information Leak and Denial-of-Service conditions. This depends on user-defined applications running on top of the UDP protocol.

Recommendations For Capital Embedded AR Classic 431-422, consider disabling UDP protocol usage until a patch is available. For Capital Embedded AR Classic R20-11 versions prior to V2303, update to version V2303 or later. For PLUSCONTROL 1st Gen, restrict access to UDP endpoints to minimize the risk of exploitation. For APOGEE MBC, APOGEE MEC, APOGEE PXC, and TALON TC, avoid using the UDP protocol in user-defined applications until the issue is resolved. For Nucleus NET, Nucleus ReadyStart V3, and Nucleus Source Code, consider applying configuration changes to limit the impact of unchecked UDP payload lengths. For Capital VSTAR, temporarily disable the vulnerable UDP packet header processing function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability for some of the affected products.

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

ASB-A-207693368

BDU:2022-02452

CVE-2021-31345

Affected Products

Apogee Mbc

Apogee Mec

Apogee Pxc

Capital Embedded Ar Classic 431-422

Capital Embedded Ar Classic R20-11

Capital Vstar

Nucleus Net

Nucleus Readystart V3

Nucleus Source Code

Pluscontrol 1St Gen

Talon Tc

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2021-31345 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-207693368 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-31345 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02452 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf · Note
• https://source.android.com/security/bulletin/2022-01-01 · Note
• https://cert-portal.siemens.com/productcert/html/ssa-620288.html · Note
• https://cert-portal.siemens.com/productcert/html/ssa-044112.html · Note
• https://t.me/cibsecurity/32047 · Telegram Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf · Note
• https://cert-portal.siemens.com/productcert/html/ssa-114589.html · Note
• https://cert-portal.siemens.com/productcert/html/ssa-845392.html · Note