PT-2014-4389 · Siemens · Rs950G+2

Publicado 2014-02-24 · Atualizado 2022-02-01 · CVE-2014-1966

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Siemens RuggedCom ROS versions prior to 3.11 Siemens RuggedCom ROS version 3.11 for RS950G Siemens RuggedCom ROS versions 3.12 through 3.12.3 Siemens RuggedCom ROS version 4.0 for RSG2488

Description The issue allows remote attackers to cause a denial of service, resulting in a device outage, by sending crafted packets to the SNMP implementation.

Recommendations For ROS versions prior to 3.11, update to version 3.11 or later. For ROS version 3.11 on RS950G, update to a later version. For ROS versions 3.12 through 3.12.3, update to version 3.12.4 or later. For ROS version 4.0 on RSG2488, update to a later version.

Correção

Identificadores relacionados

CVE-2014-1966

Produtos afetados

Rs950G

Rsg2488

Ruggedcom Ros

Referências · 3

• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf · Aviso do Fabricante
• http://ics-cert.us-cert.gov/advisories/ICSA-14-051-03 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-1966 · Nota de Segurança