漏洞信息详情

Siemens Nucleus 数字错误漏洞

• CNNVD编号：CNNVD-202111-837
• 危害等级： 超危
  
• CVE编号： CVE-2021-31889
• 漏洞类型： 数字错误
• 发布时间： 2021-11-09
• 威胁类型： 远程
• 更新时间： 2022-05-23
• 厂        商：
• 漏洞来源： Siemens reported t...

漏洞简介

Siemens Nucleus是德国西门子（Siemens）公司的一个工控设备。提供一个工控设备。

Siemens Nucleus RTOS TCP/IP Stack 存在数字错误漏洞，该漏洞源于带有损坏的 SACK 选项的畸形 TCP 数据包会导致信息泄漏和拒绝服务条件。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf

参考网址

来源:MISC

链接:https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf

来源:MISC

链接:https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf

来源:MISC

链接:https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf

来源:CONFIRM

链接:https://cert-portal.siemens.com/productcert/pdf/ssa-223353.pdf

来源:CONFIRM

链接:https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021111003

来源:source.CMS.zone.ci/e/tags/htag.php?tag=Android target=_blank class=infotextkey>Android.com

链接:https://source.CMS.zone.ci/e/tags/htag.php?tag=Android target=_blank class=infotextkey>Android.com/security/bulletin/2022-01-01

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2022.0094

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3833

来源:us-cert.cisa.gov

链接:https://us-cert.cisa.gov/ics/advisories/icsa-22-069-02

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3874

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Google-CMS.zone.ci/e/tags/htag.php?tag=Android target=_blank class=infotextkey>Android-Pixel-multiple-vulnerabilities-of-January-2022-37172

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.4289

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022011803

来源:us-cert.cisa.gov

链接:https://us-cert.cisa.gov/ics/advisories/icsa-22-013-03

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021121648

来源:us-cert.cisa.gov

链接:https://us-cert.cisa.gov/ics/advisories/icsa-21-315-07

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022010910

来源:us-cert.cisa.gov

链接:https://us-cert.cisa.gov/ics/advisories/icsa-21-350-06

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022031014

来源:us-cert.cisa.gov

链接:https://us-cert.cisa.gov/ics/advisories/icsa-21-313-03

受影响实体

暂无

补丁

• siemens Nucleus 数字错误漏洞的修复措施