PT-2015-5232 · Siemens · Ruggedcom Win52Xx+3

Published 2015-02-02 · Updated 2015-02-04 · CVE-2015-1357

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Siemens Ruggedcom WIN51xx devices with firmware prior to SS4.4.4624.35 Siemens Ruggedcom WIN52xx devices with firmware prior to SS4.4.4624.35 Siemens Ruggedcom WIN70xx devices with firmware prior to BS4.4.4621.32 Siemens Ruggedcom WIN72xx devices with firmware prior to BS4.4.4621.32

Description The issue allows context-dependent attackers to discover password hashes by reading files or security logs.

Recommendations For Siemens Ruggedcom WIN51xx devices with firmware prior to SS4.4.4624.35, update the firmware to SS4.4.4624.35 or later. For Siemens Ruggedcom WIN52xx devices with firmware prior to SS4.4.4624.35, update the firmware to SS4.4.4624.35 or later. For Siemens Ruggedcom WIN70xx devices with firmware prior to BS4.4.4621.32, update the firmware to BS4.4.4621.32 or later. For Siemens Ruggedcom WIN72xx devices with firmware prior to BS4.4.4621.32, update the firmware to BS4.4.4621.32 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-1357

Affected Products

Ruggedcom Win51Xx

Ruggedcom Win52Xx

Ruggedcom Win70Xx

Ruggedcom Win72Xx

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-1357 · Security Note
• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-753139.pdf · Vendor Advisory