CVE-2021-27393CWE-330

CVE-2021-27393: falha em Siemens Nucleus NET

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Nucleus Source Code+ Monitorar Nucleus NET

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.8%
A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.
Produtos afetados
Siemens · Nucleus NETSiemens · Nucleus ReadyStart V3Siemens · Nucleus Source Code
CVEs relacionadas — Siemens Nucleus NET

No mesmo produto, das mais perigosas para as menos.

CVE-2020-27009HIGHCVE-2020-27009EPSS 7.2%CVE-2020-15795HIGHCVE-2020-15795EPSS 6.4%CVE-2020-27738MEDIUMCVE-2020-27738EPSS 3.7%CVE-2020-27737MEDIUMCVE-2020-27737EPSS 3.6%CVE-2020-27736MEDIUMCVE-2020-27736EPSS 3.6%CVE-2021-31886—CVE-2021-31886EPSS 3.1%