PT-2023-8643 · Siemens · Ruggedcom Rs1600+50

Published 2023-08-08 · Updated 2023-11-14 · CVE-2023-39269

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions RUGGEDCOM i800 versions 4.X through 5.X RUGGEDCOM i800NC versions 4.X through 5.X RUGGEDCOM i801 versions 4.X through 5.X RUGGEDCOM i801NC versions 4.X through 5.X RUGGEDCOM i802 versions 4.X through 5.X RUGGEDCOM i802NC versions 4.X through 5.X RUGGEDCOM i803 versions 4.X through 5.X RUGGEDCOM i803NC versions 4.X through 5.X RUGGEDCOM M2100 versions 4.X through 5.X RUGGEDCOM M2100F versions 4.X through 5.X RUGGEDCOM M2100NC versions 4.X through 5.X RUGGEDCOM M2200 versions 4.X through 5.X RUGGEDCOM M2200F versions 4.X through 5.X RUGGEDCOM M2200NC versions 4.X through 5.X RUGGEDCOM M969 versions 4.X through 5.X RUGGEDCOM M969F versions 4.X through 5.X RUGGEDCOM M969NC versions 4.X through 5.X RUGGEDCOM RMC30 versions 4.X through 5.X RUGGEDCOM RMC30NC versions 4.X through 5.X RUGGEDCOM RMC8388 versions 4.X through 5.X RUGGEDCOM RMC8388NC versions 4.X through 5.X RUGGEDCOM RP110 versions 4.X through 5.X RUGGEDCOM RP110NC versions 4.X through 5.X RUGGEDCOM RS1600 versions 4.X through 5.X RUGGEDCOM RS1600F versions 4.X through 5.X RUGGEDCOM RS1600FNC versions 4.X through 5.X RUGGEDCOM RS1600NC versions 4.X through 5.X RUGGEDCOM RS1600T versions 4.X through 5.X RUGGEDCOM RS1600TNC versions 4.X through 5.X RUGGEDCOM RS400 versions 4.X through 5.X RUGGEDCOM RS400F versions 4.X through 5.X RUGGEDCOM RS400NC versions 4.X through 5.X RUGGEDCOM RS401 versions 4.X through 5.X RUGGEDCOM RS401NC versions 4.X through 5.X RUGGEDCOM RS416 versions 4.X through 5.X RUGGEDCOM RS416F versions 4.X through 5.X RUGGEDCOM RS416NC versions 4.X through 5.X RUGGEDCOM RS416NCv2 versions 4.X through 5.X RUGGEDCOM RS416P versions 4.X through 5.X RUGGEDCOM RS416PF versions 4.X through 5.X RUGGEDCOM RS416PNC versions 4.X through 5.X RUGGEDCOM RS416PNCv2 versions 4.X through 5.X RUGGEDCOM RS416Pv2 versions 4.X through 5.X RUGGEDCOM RS416v2 versions 4.X through 5.X RUGGEDCOM RS8000 versions 4.X through 5.X RUGGEDCOM RS8000A versions 4.X through 5.X RUGGEDCOM RS8000ANC versions 4.X through 5.X RUGGEDCOM RS8000H versions 4.X through 5.X RUGGEDCOM RS8000HNC versions 4.X through 5.X RUGGEDCOM RS8000NC versions 4.X through 5.X RUGGEDCOM RS8000T versions 4.X through 5.X RUGGEDCOM RS8000TNC versions 4.X through 5.X RUGGEDCOM RS900 versions 4.X through 5.X RUGGEDCOM RS900 (32M) versions 4.X through 5.X RUGGEDCOM RS900F versions 4.X through 5.X RUGGEDCOM RS900G versions 4.X through 5.X RUGGEDCOM RS900G (32M) versions 4.X through 5.X RUGGEDCOM RS900GF versions 4.X through 5.X RUGGEDCOM RS900GNC versions 4.X through 5.X RUGGEDCOM RS900GNC (32M) versions 4.X through 5.X RUGGEDCOM RS900GP versions 4.X through 5.X RUGGEDCOM RS900GPF versions 4.X through 5.X RUGGEDCOM RS900GPNC versions 4.X through 5.X RUGGEDCOM RS900L versions 4.X through 5.X RUGGEDCOM RS900LNC versions 4.X through 5.X RUGGEDCOM RS900M-GETS-C01 versions 4.X through 5.X RUGGEDCOM RS900M-GETS-XX versions 4.X through 5.X RUGGEDCOM RS900M-STND-C01 versions 4.X through 5.X RUGGEDCOM RS900M-STND-XX versions 4.X through 5.X RUGGEDCOM RS900MNC-GETS-C01 versions 4.X through 5.X RUGGEDCOM RS900MNC-GETS-XX versions 4.X through 5.X RUGGEDCOM RS900MNC-STND-XX versions 4.X through 5.X RUGGEDCOM RS900MNC-STND-XX-C01 versions 4.X through 5.X RUGGEDCOM RS900NC versions 4.X through 5.X RUGGEDCOM RS900NC (32M) versions 4.X through 5.X RUGGEDCOM RS900W versions 4.X through 5.X RUGGEDCOM RS910 versions 4.X through 5.X RUGGEDCOM RS910L versions 4.X through 5.X RUGGEDCOM RS910LNC versions 4.X through 5.X RUGGEDCOM RS910NC versions 4.X through 5.X RUGGEDCOM RS910W versions 4.X through 5.X RUGGEDCOM RS920L versions 4.X through 5.X RUGGEDCOM RS920LNC versions 4.X through 5.X RUGGEDCOM RS920W versions 4.X through 5.X RUGGEDCOM RS930L versions 4.X through 5.X RUGGEDCOM RS930LNC versions 4.X through 5.X RUGGEDCOM RS930W versions 4.X through 5.X RUGGEDCOM RS940G versions 4.X through 5.X RUGGEDCOM RS940GF versions 4.X through 5.X RUGGEDCOM RS940GNC versions 4.X through 5.X RUGGEDCOM RS969 versions 4.X through 5.X RUGGEDCOM RS969NC versions 4.X through 5.X RUGGEDCOM RSG2100 versions 4.X through 5.X RUGGEDCOM RSG2100 (32M) versions 4.X through 5.X RUGGEDCOM RSG2100F versions 4.X through 5.X RUGGEDCOM RSG2100NC versions 4.X through 5.X RUGGEDCOM RSG2100NC (32M) versions 4.X through 5.X RUGGEDCOM RSG2100P versions 4.X through 5.X RUGGEDCOM RSG2100PF versions 4.X through 5.X RUGGEDCOM RSG2100PNC versions 4.X through 5.X RUGGEDCOM RSG2200 versions 4.X through 5.X RUGGEDCOM RSG2200F versions 4.X through 5.X RUGGEDCOM RSG2200NC versions 4.X through 5.X RUGGEDCOM RSG2288 versions 4.X through 5.X RUGGEDCOM RSG2288NC versions 4.X through 5.X RUGGEDCOM RSG2300 versions 4.X through 5.X RUGGEDCOM RSG2300F versions 4.X through 5.X RUGGEDCOM RSG2300NC versions 4.X through 5.X RUGGEDCOM RSG2300P versions 4.X through 5.X RUGGEDCOM RSG2300PF versions 4.X through 5.X RUGGEDCOM RSG2300PNC versions 4.X through 5.X RUGGEDCOM RSG2488 versions 4.X through 5.X RUGGEDCOM RSG2488F versions 4.X through 5.X RUGGEDCOM RSG2488NC versions 4.X through 5.X RUGGEDCOM RSG907R versions 4.X through 5.X RUGGEDCOM RSG908C versions 4.X through 5.X RUGGEDCOM RSG909R versions 4.X through 5.X RUGGEDCOM RSG910C versions 4.X through 5.X RUGGEDCOM RSG920P versions 4.X through 5.X RUGGEDCOM RSG920PNC versions 4.X through 5.X RUGGEDCOM RSL910 versions 4.X through 5.X RUGGEDCOM RSL910NC versions 4.X through 5.X RUGGEDCOM RST2228 versions 4.X through 5.X RUGGEDCOM RST2228P versions 4.X through 5.X RUGGEDCOM RST916C versions 4.X through 5.X RUGGEDCOM RST916P versions 4.X through 5.X

Description The web server of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause total loss of availability of the web server, which might recover after the attack is over.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2024-01334

CVE-2023-39269

Affected Products

Ruggedcom M2100

Ruggedcom M2200

Ruggedcom M969

Ruggedcom Rmc30

Ruggedcom Rmc8388

Ruggedcom Rp110

Ruggedcom Rs1600

Ruggedcom Rs1600F

Ruggedcom Rs1600T

Ruggedcom Rs400

Ruggedcom Rs401

Ruggedcom Rs416

Ruggedcom Rs416Pv2

Ruggedcom Rs416P

Ruggedcom Rs8000

Ruggedcom Rs8000A

Ruggedcom Rs8000H

Ruggedcom Rs8000T

Ruggedcom Rs900

Ruggedcom Rs900G

Ruggedcom Rs900Gp

Ruggedcom Rs900L

Ruggedcom Rs900M-Gets-C01

Ruggedcom Rs900M-Gets-Xx

Ruggedcom Rs900M-Stnd-C01

Ruggedcom Rs900M-Stnd-Xx

Ruggedcom Rs900Mnc-Stnd-Xx-C01

Ruggedcom Rsl910

Ruggedcom Rs910L

Ruggedcom Rsg910C

Ruggedcom Rs920L

Ruggedcom Rs930L

Ruggedcom Rs940G

Ruggedcom Rs969

Ruggedcom Rsg2100

Ruggedcom Rsg2100P

Ruggedcom Rsg2200

Ruggedcom Rsg2288

Ruggedcom Rsg2300

Ruggedcom Rsg2300P

Ruggedcom Rsg2488

Ruggedcom Rsg907R

Ruggedcom Rsg908C

Ruggedcom Rsg909R

Ruggedcom Rsg920P

Ruggedcom Rst2228

Ruggedcom Rst916C

Ruggedcom I800

Ruggedcom I801

Ruggedcom I802

Ruggedcom I803

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-39269 · Security Note
• https://osv.dev/vulnerability/CVE-2023-39269 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01334 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-770902.pdf · Vendor Advisory
• https://t.me/cvenotify/56749 · Telegram Post
• https://cert-portal.siemens.com/productcert/html/ssa-770902.html · Note
• https://t.me/cibsecurity/67948 · Telegram Post