📦 Nucleus Source Code

by Siemens

🔍 What is Nucleus Source Code?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2021-31884

CRITICAL CVSS 9.8 Nov 9, 2021

This vulnerability affects Siemens building automation controllers and related products. It allows attackers to exploit a DHCP client flaw where the hostname option isn't properly null-terminated, pot...

CVE-2021-31886

CRITICAL CVSS 9.8 Nov 9, 2021

This vulnerability allows attackers to exploit a stack-based buffer overflow in the FTP server of Siemens building automation controllers by sending overly long USER commands. This can lead to denial-...

CVE-2021-31345

HIGH CVSS 7.5 Nov 9, 2021

This vulnerability in Siemens industrial control systems allows attackers to send malformed UDP packets with unchecked payload lengths, potentially causing information leaks or denial-of-service condi...

CVE-2021-31881

HIGH CVSS 7.1 Nov 9, 2021

This vulnerability in Siemens Capital Embedded AR Classic products allows attackers to cause denial-of-service conditions by sending specially crafted DHCP OFFER messages with malformed Vendor options...

CVE-2021-31883

HIGH CVSS 7.1 Nov 9, 2021

This vulnerability affects Siemens Capital Embedded AR Classic products where the DHCP client fails to validate vendor option lengths in DHCP ACK messages. Attackers can send specially crafted DHCP pa...

CVE-2021-31888

HIGH CVSS 8.8 Nov 9, 2021

This vulnerability affects Siemens building automation controllers and related products. It allows attackers to exploit a buffer overflow in the FTP server via specially crafted MKD/XMKD commands, pot...

CVE-2021-31890

HIGH CVSS 7.5 Nov 9, 2021

This vulnerability in Siemens industrial control systems allows attackers to send specially crafted TCP packets with unchecked payload lengths. Exploitation can cause information leaks or denial-of-se...

CVE-2020-27009

HIGH CVSS 8.1 Apr 22, 2021

This vulnerability allows attackers to execute arbitrary code or cause denial-of-service by exploiting improper validation of DNS pointer offsets during domain name record decompression. It affects Si...

CVE-2021-25663

HIGH CVSS 7.5 Apr 22, 2021

This vulnerability in Siemens Capital Embedded AR Classic, Nucleus NET, and related products allows attackers to cause denial of service by sending specially crafted IPv6 packets with malicious extens...