CVE-2021-27393
Summary
| CVE | CVE-2021-27393 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-04-22 21:15:00 UTC |
| Updated | 2022-04-22 19:38:00 UTC |
| Description | A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving. |
Risk And Classification
Problem Types: CWE-330
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Siemens | Capital Vstar | - | All | All | All |
| Application | Siemens | Nucleus Net | All | All | All | All |
| Application | Siemens | Nucleus Readystart | All | All | All | All |
| Application | Siemens | Nucleus Readystart V3 | All | All | All | All |
| Operating System | Siemens | Nucleus Rtos | - | All | All | All |
| Application | Siemens | Nucleus Source Code | - | All | All | All |
| Application | Siemens | Vstar | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf | MISC | cert-portal.siemens.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.