PT-2023-4773 · Siemens · Ruggedcom Rst916C+27

Published 2023-08-08 · Updated 2023-11-14 · CVE-2023-24845

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RUGGEDCOM i800 versions RUGGEDCOM i801 versions RUGGEDCOM i802 versions RUGGEDCOM i803 versions RUGGEDCOM M2100 versions RUGGEDCOM M2200 versions RUGGEDCOM M969 versions RUGGEDCOM RMC30 versions RUGGEDCOM RMC8388 versions 4.X through 5.X RUGGEDCOM RP110 versions RUGGEDCOM RS1600 versions RUGGEDCOM RS400 versions RUGGEDCOM RS416 versions RUGGEDCOM RS8000 versions RUGGEDCOM RS900 versions RUGGEDCOM RSG2100 versions RUGGEDCOM RSG2200 versions RUGGEDCOM RSG2288 versions 4.X through 5.X RUGGEDCOM RSG2300 versions 4.X through 5.X RUGGEDCOM RSG2488 versions 4.X through 5.X RUGGEDCOM RSG907R version RUGGEDCOM RSG908C version RUGGEDCOM RSG909R version RUGGEDCOM RSG910C version RUGGEDCOM RSG920P versions 4.X through 5.X RUGGEDCOM RSL910 version RUGGEDCOM RST2228 version RUGGEDCOM RST916C version RUGGEDCOM RST916P version

Description The affected products insufficiently block data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-684

Related Identifiers

BDU:2023-05220

CVE-2023-24845

Affected Products

Ruggedcom M2100

Ruggedcom M2200

Ruggedcom M969

Ruggedcom Rmc30

Ruggedcom Rmc8388

Ruggedcom Rp110

Ruggedcom Rs1600

Ruggedcom Rs400

Ruggedcom Rs416

Ruggedcom Rs8000

Ruggedcom Rs900

Ruggedcom Rsg2100

Ruggedcom Rsg2200

Ruggedcom Rsg2288

Ruggedcom Rsg2300

Ruggedcom Rsg2488

Ruggedcom Rsg907R

Ruggedcom Rsg908C

Ruggedcom Rsg909R

Ruggedcom Rsg910C

Ruggedcom Rsg920P

Ruggedcom Rsl910

Ruggedcom Rst2228

Ruggedcom Rst916C

Ruggedcom I800

Ruggedcom I801

Ruggedcom I802

Ruggedcom I803

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-24845 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-908185.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-24845 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05220 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-908185.html · Note
• https://t.me/cvenotify/56756 · Telegram Post
• https://twitter.com/cracbot/status/1689154652536033280 · Twitter Post