Siemens Nucleus RTOS TCP/IP Stack Multiple Vulnerabilities Advisory (SSA-044112)

Key Information Vulnerability Description Vulnerability ID: SSA-044112 Vulnerability Name: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS Release Date: 2021-11-09 Update Date: 2021-12-14 Current Version: V1.1 CVSS v3.1 Base Score: 9.8 Affected Products and Solutions Affected Products and Versions: - Nucleus NET: All versions - Nucleus ReadyStart V3: All versions ) and product manuals. Product Description The Nucleus NET module integrates a complete set of standard-compliant networking and communication protocols, drivers, and tools to provide comprehensive network support on any embedded device. Nucleus ReadyStart is a platform with integrated software IP, tools, and services, suitable for applications requiring small footprint, deterministic performance, and small code size. Nucleus RTOS is a microkernel-based real-time operating system used in aerospace, industrial, and medical applications. Since version V3, Nucleus RTOS (including its modules such as Nucleus NET) has been part of the Nucleus ReadyStart platform. Vulnerability Classification Vulnerability classification uses the CVSS scoring system, version 3.1 (CVSS v3.1). The CVSS Environmental Score is specific to the customer’s environment and will affect the overall CVSS score. The environmental score should be defined individually by the customer as needed. Patches and Fixes Nucleus ReadyStart V3: Upgrade to V2017.02.4 or higher. Nucleus ReadyStart V4: Upgrade to V4.1.1 or higher. Nucleus Source Code: Contact customer support for patch and update information. Acknowledgments Siemens thanks the following for their efforts: - Yuval Halaban, Uriel Malin, and Tal Zohar from Medigate for coordinated disclosure. - Daniel dos Santos, Amine Amri, and Stanislav Dashevskyi from Forescout Technologies for coordinated disclosure. Additional Information For more detailed information about the Nucleus:13 vulnerabilities, refer to Forescout’s “Nucleus:13” publication. Nucleus ReadyStart V3: Some vulnerabilities were already fixed prior to V2017.02.4. Nucleus ReadyStart V4: Some vulnerabilities were already fixed prior to V2017.02.4. For further inquiries regarding security vulnerabilities in Siemens products and solutions, please contact Siemens ProductCERT. Historical Data V1.0 (2021-11-09): Initial release date V1.1 (2021-12-14): Moved product CAPITAL VSTAR to a separate advisory (SSA-620288) Terms of Use Siemens Security Advisories are subject to Siemens’ license terms or any other applicable agreements previously established with Siemens. Where applicable, the “Terms of Use” (hereinafter “Terms of Use”) on Siemens’ global website (), particularly Sections 8–10, shall apply to information, software, or documentation. In case of conflict between the Terms of Use and the license terms, the license terms shall prevail.

Goal Reached Thanks to every supporter — we hit 100%!

Siemens Nucleus RTOS TCP/IP Stack Multiple Vulnerabilities Advisory (SSA-044112)