PT-2014-4389 · Siemens · Rs950G+2

Published 2014-02-24 · Updated 2022-02-01 · CVE-2014-1966

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Siemens RuggedCom ROS versions prior to 3.11 Siemens RuggedCom ROS version 3.11 for RS950G Siemens RuggedCom ROS versions 3.12 through 3.12.3 Siemens RuggedCom ROS version 4.0 for RSG2488

Description The issue allows remote attackers to cause a denial of service, resulting in a device outage, by sending crafted packets to the SNMP implementation.

Recommendations For ROS versions prior to 3.11, update to version 3.11 or later. For ROS version 3.11 on RS950G, update to a later version. For ROS versions 3.12 through 3.12.3, update to version 3.12.4 or later. For ROS version 4.0 on RSG2488, update to a later version.

Fix

Related Identifiers

CVE-2014-1966

Affected Products

Rs950G

Rsg2488

Ruggedcom Ros

References · 3

• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-1966 · Security Note
• http://ics-cert.us-cert.gov/advisories/ICSA-14-051-03 · Note