PT-2015-5232 · Siemens · Ruggedcom Win52Xx+3

Publicado 2015-02-02 · Atualizado 2015-02-04 · CVE-2015-1357

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Siemens Ruggedcom WIN51xx devices with firmware prior to SS4.4.4624.35 Siemens Ruggedcom WIN52xx devices with firmware prior to SS4.4.4624.35 Siemens Ruggedcom WIN70xx devices with firmware prior to BS4.4.4621.32 Siemens Ruggedcom WIN72xx devices with firmware prior to BS4.4.4621.32

Description The issue allows context-dependent attackers to discover password hashes by reading files or security logs.

Recommendations For Siemens Ruggedcom WIN51xx devices with firmware prior to SS4.4.4624.35, update the firmware to SS4.4.4624.35 or later. For Siemens Ruggedcom WIN52xx devices with firmware prior to SS4.4.4624.35, update the firmware to SS4.4.4624.35 or later. For Siemens Ruggedcom WIN70xx devices with firmware prior to BS4.4.4621.32, update the firmware to BS4.4.4621.32 or later. For Siemens Ruggedcom WIN72xx devices with firmware prior to BS4.4.4621.32, update the firmware to BS4.4.4621.32 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-1357

Produtos afetados

Ruggedcom Win51Xx

Ruggedcom Win52Xx

Ruggedcom Win70Xx

Ruggedcom Win72Xx

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-1357 · Nota de Segurança
• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-753139.pdf · Aviso do Fabricante