CVE:CVE-2021-31345
CNNVD:CNNVD-202111-853
Siemens Nucleus是德国西门子（Siemens）公司的一个工控设备。提供一个工控设备。
Siemens Nucleus 存在安全漏洞，该漏洞源于 UDP 有效负载的总长度（在 IP 标头中设置）未选中。这可能会导致各种副作用，包括信息泄漏和拒绝服务条件，具体取决于运行在 UDP 协议之上的用户定义的应用程序。
solution:Upgrade siemens capital_vstar to a higher version than *; Upgrade siemens nucleus_net to a higher version than *; Upgrade siemens nucleus_readystart_v3 to a higher version than 2014.12,and avoid the version (,2014.12); Upgrade siemens nucleus_source_code to a higher version than *; Upgrade siemens apogee_modular_building_controller_firmware to a higher version than *; Upgrade siemens apogee_modular_equiment_controller_firmware to a higher version than *; Upgrade siemens apogee_pxc_compact_firmware to a higher version than *; Upgrade siemens apogee_pxc_modular_firmware to a higher version than *; Upgrade siemens talon_tc_compact_firmware to a higher version than *; Upgrade siemens talon_tc_modular_firmware to a higher version than *