<p>Multiple vulnerabilities (also known as “NUCLEUS:13”) have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: <a href="https://cert-portal.siemens.com/productcert/html/ssa-044112.html" class="uri">https://cert-portal.siemens.com/productcert/html/ssa-044112.html</a>.</p>
<p>Capital Embedded AR Classic uses an affected version of the Nucleus software and inherently contains several of these vulnerabilities.</p>
<p>Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p>
Source link
