PT-2021-7763 · Unknown · Nucleus Net+7

Published 2021-02-09 · Updated 2023-08-08 · CVE-2020-28388

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions APOGEE PXC Compact (BACnet) versions prior to V3.5.5 APOGEE PXC Compact (P2 Ethernet) versions prior to V2.8.20 APOGEE PXC Modular (BACnet) versions prior to V3.5.5 APOGEE PXC Modular (P2 Ethernet) versions prior to V2.8.20 Nucleus NET versions prior to V5.2 Nucleus ReadyStart V3 versions prior to V2012.12 Nucleus Source Code (all versions) PLUSCONTROL 1st Gen (all versions) TALON TC Compact (BACnet) versions prior to V3.5.5 TALON TC Modular (BACnet) versions prior to V3.5.5

Description The issue is related to the predictability of Initial Sequence Numbers (ISNs) for TCP connections, which are derived from an insufficiently random source. This could allow an attacker to predict the ISN of current and future TCP connections, potentially enabling them to hijack existing sessions or spoof future ones.

Recommendations For APOGEE PXC Compact (BACnet) versions prior to V3.5.5, update to version V3.5.5 or later. For APOGEE PXC Compact (P2 Ethernet) versions prior to V2.8.20, update to version V2.8.20 or later. For APOGEE PXC Modular (BACnet) versions prior to V3.5.5, update to version V3.5.5 or later. For APOGEE PXC Modular (P2 Ethernet) versions prior to V2.8.20, update to version V2.8.20 or later. For Nucleus NET versions prior to V5.2, update to version V5.2 or later. For Nucleus ReadyStart V3 versions prior to V2012.12, update to version V2012.12 or later. For Nucleus Source Code, consider implementing a more secure random number generator for ISNs. For PLUSCONTROL 1st Gen, consider implementing a more secure random number generator for ISNs or seeking an alternative solution. For TALON TC Compact (BACnet) versions prior to V3.5.5, update to version V3.5.5 or later. For TALON TC Modular (BACnet) versions prior to V3.5.5, update to version V3.5.5 or later.

Fix

Weakness Enumeration

CWE-342

Related Identifiers

BDU:2023-02702

CVE-2020-28388

Affected Products

Apogee Pxc Compact

Apogee Pxc Modular

Nucleus Net

Nucleus Readystart V3

Nucleus Source Code

Pluscontrol 1St Gen

Talon Tc Compact

Talon Tc Modular

References · 9

• https://cert-portal.siemens.com/productcert/pdf/ssa-362164.pdf · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-344238.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-28388 · Security Note
• https://bdu.fstec.ru/vul/2023-02702 · Security Note
• https://osv.dev/vulnerability/CVE-2020-28388 · Vendor Advisory
• https://vuldb.com/ru/?id.169606 · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-436469.pdf · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf · Note
• https://cisa.gov/news-events/ics-advisories/icsa-21-042-01 · Note