A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes the Hop-by-Hop extension header in IPv6 packets and its options lacks any checks against the length field of the header, allowing attackers to put the function into an infinite loop by supplying arbitrary length values.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Capital Embedded AR Classic 431-422
Vendor
Siemens
Product
Capital Embedded AR Classic 431-422
Platforms
Unknown
Default status
unknown
Capital Embedded AR Classic 431-422 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
*
Unavailable
None listed
Capital Embedded AR Classic R20-11
Vendor
Siemens
Product
Capital Embedded AR Classic R20-11
Platforms
Unknown
Default status
unknown
Capital Embedded AR Classic R20-11 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2303
Unavailable
None listed
Nucleus NET
Vendor
Siemens
Product
Nucleus NET
Platforms
Unknown
Default status
unknown
Nucleus NET · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
Nucleus ReadyStart V3
Vendor
Siemens
Product
Nucleus ReadyStart V3
Platforms
Unknown
Default status
unknown
Nucleus ReadyStart V3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2017.02.4
Unavailable
None listed
Nucleus ReadyStart V4
Vendor
Siemens
Product
Nucleus ReadyStart V4
Platforms
Unknown
Default status
unknown
Nucleus ReadyStart V4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V4.1.0
Unavailable
None listed
Nucleus Source Code
Vendor
Siemens
Product
Nucleus Source Code
Platforms
Unknown
Default status
unknown
Nucleus Source Code · Scoped product and version facts