siemens nucleus-net CVE-2020-27009 vulnerability in Siemens Products
Published on April 22, 2021

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions < V5.2), Nucleus Source Code (Versions including affected DNS modules), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). The DNS domain name record decompression functionality does not properly validate the pointer offset values. The parsing of malformed responses could result in a write past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to execute code in the context of the current process or cause a denial-of-service condition.

NVD

Weakness Type

What is an Untrusted pointer offset Vulnerability?

The program performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.

CVE-2020-27009 has been classified to as an Untrusted pointer offset vulnerability or weakness.


Products Associated with CVE-2020-27009

Want to know whenever a new CVE is published for Siemens products? stack.watch will email you.

Siemens Nucleus Net
 
Siemens Nucleus Rtos
 
Siemens Vstar
 
Siemens Nucleus Source Code
 
Siemens Capital Vstar
 

Affected Versions

Siemens APOGEE PXC Compact (BACnet): Siemens APOGEE PXC Compact (P2 Ethernet): Siemens APOGEE PXC Modular (BACnet): Siemens APOGEE PXC Modular (P2 Ethernet): Siemens Nucleus NET: Siemens Nucleus Source Code: Siemens TALON TC Compact (BACnet): Siemens TALON TC Modular (BACnet):

Exploit Probability

EPSS
0.69%
Percentile
71.48%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.