CVE-2021-25677

State: Published
Severity: 5.3 Medium
Published: Apr 22, 2021
Updated: Aug 3, 2024
Reserved: Jan 21, 2021

Description

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (Versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions >= V0.5.0.0 < V1.0.0.0), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). The DNS client does not properly randomize DNS transaction IDs. That could allow an attacker to poison the DNS cache or spoof DNS resolving.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C	siemens

Weaknesses

CWE-330 Use of Insufficiently Random Values

Affected Products

Product	Versions
APOGEE PXC Compact (BACnet)Siemens	All versions < V3.5.5Affected
APOGEE PXC Compact (P2 Ethernet)Siemens	All versions < V2.8.20Affected
APOGEE PXC Modular (BACnet)Siemens	All versions < V3.5.5Affected
APOGEE PXC Modular (P2 Ethernet)Siemens	All versions < V2.8.20Affected
Nucleus NETSiemens	All versionsAffected
Nucleus ReadyStart V3Siemens	All versions < V2017.02.3Affected
Nucleus ReadyStart V3Siemens	All versions < V2017.02.4Affected
Nucleus ReadyStart V4Siemens	All versions < V4.1.0Affected
Nucleus Source CodeSiemens	Versions including affected DNS modulesAffected
SIMOTICS CONNECT 400Siemens	All versions < V0.5.0.0Affected
SIMOTICS CONNECT 400Siemens	All versions >= V0.5.0.0 < V1.0.0.0Affected
TALON TC Compact (BACnet)Siemens	All versions < V3.5.5Affected
TALON TC Modular (BACnet)Siemens	All versions < V3.5.5Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.