← CVE Intelligence

CVE-2021-27393

Siemens / Nucleus NET PUBLISHED

Description (CNA)

A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.

Affected (CNA)

Vendor / productVersions
Siemens / Nucleus NETaffected All versions
Siemens / Nucleus ReadyStart V3affected All versions < V2013.08
Siemens / Nucleus Source Codeaffected Versions including affected DNS modules

CWE

CWE-330

References

ADP enrichment

CVE

No English description supplied.