CVE:CVE-2021-31886
CNNVD:CNNVD-202111-843
Siemens Nucleus ReadyStart是德国Siemens公司的一个捆绑式解决方案。用于加速完整系统的快速启动并提供丰富的板级支持包 (Bsp)
Siemens Nucleus ReadyStart  存在缓冲区错误漏洞，该漏洞源于 FTP 服务器未正确验证 USER 命令的长度，导致基于堆栈的缓冲区溢出。这可能会导致拒绝服务条件和远程代码执行。
solution:Upgrade siemens nucleus_net to a higher version than *; Upgrade siemens nucleus_readystart_v3 to a higher version than 2017.02.4,and avoid the version (,2017.02.4); Upgrade siemens nucleus_source_code to a higher version than *; Upgrade siemens apogee_modular_building_controller_firmware to a higher version than *; Upgrade siemens apogee_modular_equiment_controller_firmware to a higher version than *; Upgrade siemens apogee_pxc_compact_firmware to a higher version than 2.8.19,3.5.4,and avoid the version (,2.8.19),(,3.5.4); Upgrade siemens apogee_pxc_modular_firmware to a higher version than 2.8.19,3.5.4,and avoid the version (,2.8.19),(,3.5.4); Upgrade siemens talon_tc_compact_firmware to a higher version than 3.5.4,and avoid the version (,3.5.4); Upgrade siemens talon_tc_modular_firmware to a higher version than 3.5.4,and avoid the version (,3.5.4); Upgrade siemens desigo_pxc00-e.d_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016); Upgrade siemens desigo_pxc00-u_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016); Upgrade siemens desigo_pxc001-e.d_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016); Upgrade siemens desigo_pxc12-e.d_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016); Upgrade siemens desigo_pxc22-e.d_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016); Upgrade siemens desigo_pxc22.1-e.d_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016); Upgrade siemens desigo_pxc36.1-e.d_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016); Upgrade siemens desigo_pxc50-e.d_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016); Upgrade siemens desigo_pxc64-u_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016); Upgrade siemens desigo_pxc100-e.d_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016); Upgrade siemens desigo_pxc128-u_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016); Upgrade siemens desigo_pxc200-e.d_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016); Upgrade siemens desigo_pxm20-e_firmware to a higher version than 6.30.016,and avoid the version [2.3,6.30.016)