SSA-845392 V1.0: Multiple Vulnerabilities in Nucleus RTOS based Siemens Energy PLUSCONTROL 1st Gen Devices

Risk Summary

<p>Multiple vulnerabilities (also known as “NUCLEUS:13”) have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: <a href="https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf" class="uri">https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf</a>.</p> <p>PLUSCONTROL 1st Gen devices are affected by some of the vulnerabilities as documented below.</p> <p>Siemens Energy recommends specific countermeasures for products where updates are not available.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)