PT-2014-4799 · Siemens · Ruggedcom Ros

Publicado 2014-03-28 · Atualizado 2022-02-01 · CVE-2014-2590

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Siemens RuggedCom ROS versions prior to 3.11 Siemens RuggedCom ROS version 3.11 prior to 3.11.5 for RS950G Siemens RuggedCom ROS version 3.12 Siemens RuggedCom ROS version 4.0 for RSG2488

Description The issue allows remote attackers to cause a denial of service, resulting in an interface outage, by sending crafted HTTP packets to the web management interface.

Recommendations For ROS versions prior to 3.11, update to version 3.11 or later. For ROS version 3.11 prior to 3.11.5 for RS950G, update to version 3.11.5 or later. For ROS version 3.12, update to a version that is not affected by this issue. For ROS version 4.0 for RSG2488, update to a version that is not affected by this issue.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2014-2590

Produtos afetados

Ruggedcom Ros

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-2590 · Nota de Segurança
• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-831997.pdf · Aviso do Fabricante
• http://ics-cert.us-cert.gov/advisories/ICSA-14-087-01 · Nota