CVE-2021-27393

Name of the Vulnerable Software and Affected Versions Nucleus NET versions all Nucleus ReadyStart V3 versions prior to V2013.08 Nucleus Source Code versions including affected DNS modules

Description A vulnerability has been identified where the DNS client does not properly randomize UDP port numbers of DNS requests. This could allow an attacker to poison the DNS cache or spoof DNS resolving.

Recommendations For Nucleus NET versions all, consider implementing additional security measures to prevent DNS cache poisoning. For Nucleus ReadyStart V3 versions prior to V2013.08, update to version V2013.08 or later. For Nucleus Source Code versions including affected DNS modules, modify the DNS client to properly randomize UDP port numbers of DNS requests.