Riskcovery

CVE-2021-27393

State
Published
Severity
Not scored
Published
Apr 22, 2021
Updated
Aug 3, 2024
Reserved
Feb 18, 2021

Read the record on cve.org

Description

A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-330 Use of Insufficiently Random Values

Affected Products

ProductVersions
Nucleus NETSiemens
  • All versionsAffected
Nucleus ReadyStart V3Siemens
  • All versions < V2013.08Affected
Nucleus Source CodeSiemens
  • Versions including affected DNS modulesAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.