References https://www.csoonline.com/article/571597/flaws-in-the-nucleus-embedded-tcp-ip-stack-puts-critical-systems-at-risk.html https://isssource.com/siemens-clears-nucleus-products-issues/ https://fieldeffect.com/blog/siemens-november-security-advisories-include-critical-fixes https://www.tenable.com/blog/nucleus13-13-vulnerabilities-found-in-siemens-nucleus-tcpip-stack https://www.cvedetails.com/version/1439683/Siemens-Nucleus-Readystart--.html https://nvd.nist.gov/vuln/detail/cve-2021-25664 https://www.cisa.gov/news-events/ics-advisories/icsa-21-315-07 https://cert-portal.siemens.com/productcert/html/ssa-313313.html https://www.hipaajournal.com/medical-devices-affected-by-13-siemens-nucleus-rtos-tcp-ip-stack-vulnerabilities/ https://cybellum.com/blog/nucleus13-vulnerabilities-hit-siemens-nucleus-tcp-ip-stack/ https://zone.ci/aliyun/ali_nvd/81800.html https://avd.aliyun.com/detail?id=AVD-2021-31884 https://www.cnvd.org.cn/patchInfo/show/258426 https://stack.watch/product/siemens/nucleus-net/
Related VulnerabilitiesSiemens SIMATIC HMI MiniWeb /FormLogin 默认口令漏洞PoCCVE-2014-2908: Siemens SIMATIC S7-1200 CPU - Cross-Site ScriptingPoCsiemens-simatic-default-login: Siemens SIMATIC HMI Miniweb - Default LoginPoCsimatic-dashboard-exposed: Siemens SIMATIC 300 Dashboard - ExposedSiemens TeleControl Server Basic SQL注入漏洞