Out of Bounds Write Vulnerabilities (NAME:WRECK) in the DNS Module of Nucleus RTOS

An attacker could crash a device running Nucleus RTOS or execute arbitrary code on it by sending malicious DNS responses, potentially disrupting or taking control of industrial equipment that depends on this operating system.

Operators of industrial equipment and IoT devices running Siemens Nucleus RTOS, particularly embedded systems in manufacturing, utility control systems, and remote monitoring equipment that rely on DNS for network communication.

An attacker on the same network or positioned to intercept DNS traffic would send a specially crafted DNS response to a device running Nucleus NET. The DNS client would process the response without proper bounds checking, allowing the attacker to write data outside allocated memory and either crash the device (denial of service) or execute code with device privileges.