PT-2014-4799 · Siemens · Ruggedcom Ros

Published 2014-03-28 · Updated 2022-02-01 · CVE-2014-2590

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Siemens RuggedCom ROS versions prior to 3.11 Siemens RuggedCom ROS version 3.11 prior to 3.11.5 for RS950G Siemens RuggedCom ROS version 3.12 Siemens RuggedCom ROS version 4.0 for RSG2488

Description The issue allows remote attackers to cause a denial of service, resulting in an interface outage, by sending crafted HTTP packets to the web management interface.

Recommendations For ROS versions prior to 3.11, update to version 3.11 or later. For ROS version 3.11 prior to 3.11.5 for RS950G, update to version 3.11.5 or later. For ROS version 3.12, update to a version that is not affected by this issue. For ROS version 4.0 for RSG2488, update to a version that is not affected by this issue.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2014-2590

Affected Products

Ruggedcom Ros

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-2590 · Security Note
• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-831997.pdf · Vendor Advisory
• http://ics-cert.us-cert.gov/advisories/ICSA-14-087-01 · Note