CVE:CVE-2021-31890
CNNVD:CNNVD-202111-836
Siemens Nucleus ReadyStart是德国Siemens公司的一个捆绑式解决方案。用于加速完整系统的快速启动并提供丰富的板级支持包 (Bsp)
Siemens Nucleus ReadyStart 存在安全漏洞，该漏洞源于 TCP 有效负载的总长度（在 IP 标头中设置）未选中。这可能会导致各种副作用，包括信息泄漏和拒绝服务条件，具体取决于内存中的网络缓冲区组织。
solution:Upgrade siemens capital_vstar to a higher version than *; Upgrade siemens nucleus_net to a higher version than *; Upgrade siemens nucleus_readystart_v3 to a higher version than 2017.02.4,and avoid the version (,2017.02.4); Upgrade siemens nucleus_readystart_v4 to a higher version than 4.1.1,and avoid the version (,4.1.1); Upgrade siemens nucleus_source_code to a higher version than *; Upgrade siemens apogee_modular_building_controller_firmware to a higher version than *; Upgrade siemens apogee_modular_equiment_controller_firmware to a higher version than *; Upgrade siemens apogee_pxc_compact_firmware to a higher version than *; Upgrade siemens apogee_pxc_modular_firmware to a higher version than *; Upgrade siemens talon_tc_compact_firmware to a higher version than *; Upgrade siemens talon_tc_modular_firmware to a higher version than *