Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic

An attacker with network access could exploit these memory safety vulnerabilities to crash the embedded controller or execute arbitrary code, disrupting process control and automation in your industrial system. For 431-422 models with no patch available, the device remains permanently vulnerable.

Water authorities, municipal electric utilities, and other critical infrastructure operators using Siemens Capital Embedded AR Classic controllers for process automation, SCADA applications, and distributed control systems are affected. This includes any facility relying on these embedded controllers for real-time process monitoring and automation (431-422 and R20-11 model lines).

An attacker on the network sends malformed input or network packets to Capital Embedded AR Classic, triggering a memory safety flaw in the Nucleus RTOS. The vulnerability could allow buffer overflow, integer overflow, or type confusion leading to code execution or denial of service without requiring authentication or user interaction.