SSA-620288 V1.3 (Last Update: 2025-03-11): Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic

Risk Summary

<p>Multiple vulnerabilities (also known as “NUCLEUS:13”) have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: <a href="https://cert-portal.siemens.com/productcert/html/ssa-044112.html" class="uri">https://cert-portal.siemens.com/productcert/html/ssa-044112.html</a>.</p> <p>Capital Embedded AR Classic uses an affected version of the Nucleus software and inherently contains several of these vulnerabilities.</p> <p>Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)