SB2021041414 - Multiple vulnerabilities in Siemens Nucleus Products

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Infinite loop (CVE-ID: CVE-2021-25663)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop when the function that processes IPv6 headers does not check the lengths of extension header options. A remote attacker can consume all available system resources and cause denial of service conditions.

2) Infinite loop (CVE-ID: CVE-2021-25664)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to the function that processes the hop-by-hop extension header in IPv6 packets and its options lacks any checks against the length field of the header. A remote attacker can consume all available system resources and cause denial of service conditions.

Remediation

Install update from vendor's website.

References

• https://ics-cert.us-cert.gov/advisories/icsa-21-103-05
• https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf