VULNERABILITY INTELLIGENCE

CVE-2021-27393

CVSS score5.3 MEDIUM
EPSS probability0.75%
CISA KEVNot currently listed
Published2021-04-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving.

Weakness classification

  • productcert@siemens.com: CWE-330
  • nvd@nist.gov: CWE-330

Primary references