Vulnerability-Lookup

CNVD-2021-89444

Vulnerability from cnvd - Published: 2021-11-20

Title

Siemens Nucleus ReadyStart输入验证不正确漏洞

Description

Siemens Nucleus ReadyStart是德国Siemens公司的一个捆绑式解决方案。用于加速完整系统的快速启动并提供丰富的板级支持包 (Bsp)。 Siemens Nucleus ReadyStart存在安全漏洞，该漏洞源于UDP有效负载的总长度（在 IP 标头中设置）未选中。攻击者可利用漏洞导致信息泄露和拒绝服务条件，具体取决于运行在UDP协议之上的用户定义的应用程序。

Severity

中

Patch Name

Siemens Nucleus ReadyStart输入验证不正确漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf

Reference

https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf

Impacted products

Name
Siemens Nucleus ReadyStart < V4.1.1

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-31346"
    }
  },
  "description": "Siemens Nucleus ReadyStart\u662f\u5fb7\u56fdSiemens\u516c\u53f8\u7684\u4e00\u4e2a\u6346\u7ed1\u5f0f\u89e3\u51b3\u65b9\u6848\u3002\u7528\u4e8e\u52a0\u901f\u5b8c\u6574\u7cfb\u7edf\u7684\u5feb\u901f\u542f\u52a8\u5e76\u63d0\u4f9b\u4e30\u5bcc\u7684\u677f\u7ea7\u652f\u6301\u5305 (Bsp)\u3002\n\nSiemens Nucleus ReadyStart\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eUDP\u6709\u6548\u8d1f\u8f7d\u7684\u603b\u957f\u5ea6\uff08\u5728 IP \u6807\u5934\u4e2d\u8bbe\u7f6e\uff09\u672a\u9009\u4e2d\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u5bfc\u81f4\u4fe1\u606f\u6cc4\u9732\u548c\u62d2\u7edd\u670d\u52a1\u6761\u4ef6\uff0c\u5177\u4f53\u53d6\u51b3\u4e8e\u8fd0\u884c\u5728UDP\u534f\u8bae\u4e4b\u4e0a\u7684\u7528\u6237\u5b9a\u4e49\u7684\u5e94\u7528\u7a0b\u5e8f\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-89444",
  "openTime": "2021-11-20",
  "patchDescription": "Siemens Nucleus ReadyStart\u662f\u5fb7\u56fdSiemens\u516c\u53f8\u7684\u4e00\u4e2a\u6346\u7ed1\u5f0f\u89e3\u51b3\u65b9\u6848\u3002\u7528\u4e8e\u52a0\u901f\u5b8c\u6574\u7cfb\u7edf\u7684\u5feb\u901f\u542f\u52a8\u5e76\u63d0\u4f9b\u4e30\u5bcc\u7684\u677f\u7ea7\u652f\u6301\u5305 (Bsp)\u3002\r\n\r\nSiemens Nucleus ReadyStart\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eUDP\u6709\u6548\u8d1f\u8f7d\u7684\u603b\u957f\u5ea6\uff08\u5728 IP \u6807\u5934\u4e2d\u8bbe\u7f6e\uff09\u672a\u9009\u4e2d\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u5bfc\u81f4\u4fe1\u606f\u6cc4\u9732\u548c\u62d2\u7edd\u670d\u52a1\u6761\u4ef6\uff0c\u5177\u4f53\u53d6\u51b3\u4e8e\u8fd0\u884c\u5728UDP\u534f\u8bae\u4e4b\u4e0a\u7684\u7528\u6237\u5b9a\u4e49\u7684\u5e94\u7528\u7a0b\u5e8f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens Nucleus ReadyStart\u8f93\u5165\u9a8c\u8bc1\u4e0d\u6b63\u786e\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Siemens Nucleus ReadyStart \u003c V4.1.1"
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf",
  "serverity": "\u4e2d",
  "submitTime": "2021-11-11",
  "title": "Siemens Nucleus ReadyStart\u8f93\u5165\u9a8c\u8bc1\u4e0d\u6b63\u786e\u6f0f\u6d1e"
}

CVE-2021-31346 (GCVE-0-2021-31346)

Vulnerability from cvelistv5 – Published: 2021-11-09 11:31 – Updated: 2025-03-11 09:47

Summary

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an ICMP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0007)

Severity

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

CWE

CWE-1284 - Improper Validation of Specified Quantity in Input

Assigner

siemens icscert root Scorecard

References

10 references

URL	Tags
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_MISC
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_MISC
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_MISC
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_MISC
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_MISC
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

5 products

Vendor	Product	Version
Siemens	Capital Embedded AR Classic 431-422	Affected: 0 , < * (custom)
Siemens	Capital Embedded AR Classic R20-11	Affected: 0 , < V2303 (custom)
Siemens	PLUSCONTROL 1st Gen	Affected: All versions
Siemens	SIMOTICS CONNECT 400	Affected: All versions < V0.5.0.0
Siemens	SIMOTICS CONNECT 400	Affected: All versions < V1.0.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:55:53.543Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-223353.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Capital Embedded AR Classic 431-422",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Capital Embedded AR Classic R20-11",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2303",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "PLUSCONTROL 1st Gen",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOTICS CONNECT 400",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V0.5.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOTICS CONNECT 400",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V1.0.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions \u003c V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions \u003c V0.5.0.0), SIMOTICS CONNECT 400 (All versions \u003c V1.0.0.0). The total length of an ICMP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0007)"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1284",
              "description": "CWE-1284: Improper Validation of Specified Quantity in Input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-11T09:47:39.488Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-223353.pdf"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-114589.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-044112.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-620288.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-845392.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-223353.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2021-31346",
    "datePublished": "2021-11-09T11:31:53.000Z",
    "dateReserved": "2021-04-15T00:00:00.000Z",
    "dateUpdated": "2025-03-11T09:47:39.488Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2021-89444

CVE-2021-31346 (GCVE-0-2021-31346)

Tags

Sightings

Nomenclature

Related by attack behaviour