description: A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.
problem types: CWE-330: Use of Insufficiently Random Values
affected:
{
product: Nucleus NET
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: Nucleus ReadyStart V3
vendor: Siemens
versions:
status: affected, version: All versions < V2013.08
}
{
product: Nucleus Source Code
vendor: Siemens
versions:
status: affected, version: Versions including affected DNS modules
}
