CVE:CVE-2021-31882
CNNVD:CNNVD-202111-850
Siemens Nucleus是德国西门子（Siemens）公司的一个工控设备。提供一个工控设备。
Siemens Nucleus RTOS TCP/IP Stack 存在缓冲区错误漏洞，该漏洞源于DHCP 客户端应用程序在处理 DHCP ACK 数据包时不会验证域名服务器 IP 选项 (0x06) 的长度。这可能会导致拒绝服务条件。
solution:Upgrade siemens capital_vstar to a higher version than *; Upgrade siemens nucleus_net to a higher version than *; Upgrade siemens nucleus_readystart_v3 to a higher version than 2017.02.1,and avoid the version (,2017.02.1); Upgrade siemens nucleus_source_code to a higher version than *; Upgrade siemens apogee_modular_building_controller_firmware to a higher version than *; Upgrade siemens apogee_modular_equiment_controller_firmware to a higher version than *; Upgrade siemens apogee_pxc_compact_firmware to a higher version than *; Upgrade siemens apogee_pxc_modular_firmware to a higher version than *; Upgrade siemens talon_tc_compact_firmware to a higher version than *; Upgrade siemens talon_tc_modular_firmware to a higher version than *