ICSA-19-099-05 Siemens RUGGEDCOM ROX II
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-5381US | high7.5 | — | ||
The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The pars… | ||||
| CVE-2018-5380US | medium4.3 | — | ||
The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input. | ||||
| CVE-2018-5379US | critical9.8 | — | ||
The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A suc… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- MitigationRUGGEDCOM ROX II
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Configure BGP passwords to authenticate BGP neighbours.
- MitigationRUGGEDCOM ROX II
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Configure BGP passwords to authenticate BGP neighbours.
- MitigationRUGGEDCOM ROX II
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Configure BGP passwords to authenticate BGP neighbours.
- FixedRUGGEDCOM ROX II
Update to V2.13.0 - Download: The firmware updates for the RUGGEDCOM ROX-based devices can be obtained by contacting the RUGGEDCOM support team at: https://support.industry.siemens.com/my/WW/en/requests#createRequest
https://support.industry.siemens.com/my/WW/en/requests - FixedRUGGEDCOM ROX II
Update to V2.13.0 - Download: The firmware updates for the RUGGEDCOM ROX-based devices can be obtained by contacting the RUGGEDCOM support team at: https://support.industry.siemens.com/my/WW/en/requests#createRequest
https://support.industry.siemens.com/my/WW/en/requests - FixedRUGGEDCOM ROX II
Update to V2.13.0 - Download: The firmware updates for the RUGGEDCOM ROX-based devices can be obtained by contacting the RUGGEDCOM support team at: https://support.industry.siemens.com/my/WW/en/requests#createRequest
https://support.industry.siemens.com/my/WW/en/requests
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan