PT-2015-7316 · Siemens · Ruggedcom Ros

Stephen Craven · Publicado 2015-09-11 · Atualizado 2016-12-22 · CVE-2015-6675

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:A/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROS versions 3.8.0 through 4.1.x

Description The issue allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic because the IP forwarding feature is permanently enabled.

Recommendations For versions 3.8.0 through 4.1.x, consider disabling the IP forwarding feature as a temporary workaround to minimize the risk of exploitation.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2015-6675

Produtos afetados

Ruggedcom Ros

Referências · 4

• http://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-720081.pdf · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-15-244-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6675 · Nota de Segurança
• http://securitytracker.com/id/1033478 · Nota