PT-2015-7316 · Siemens · Ruggedcom Ros

Stephen Craven · Published 2015-09-11 · Updated 2016-12-22 · CVE-2015-6675

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:A/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROS versions 3.8.0 through 4.1.x

Description The issue allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic because the IP forwarding feature is permanently enabled.

Recommendations For versions 3.8.0 through 4.1.x, consider disabling the IP forwarding feature as a temporary workaround to minimize the risk of exploitation.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2015-6675

Affected Products

Ruggedcom Ros

References · 4

• http://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-720081.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6675 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-244-01 · Note
• http://securitytracker.com/id/1033478 · Note