RuggedCom ROS Multiple Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-6926US | high8.0OT elevated | — | ||
The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended restrictions on administrative actions by leveraging access… | ||||
| CVE-2013-6925US | high8.3OT elevated | — | ||
The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-13-340-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-13-340-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationRuggedCom devices with ROS firmware
Siemens has produced a firmware update, RuggedCom ROS V3.12.2, which resolves these vulnerabilities. Asset owners and operators should contact Siemens customer support to acquire the update.
- MitigationRuggedCom devices with ROS firmware
Siemens has produced a firmware update, RuggedCom ROS V3.12.2, which resolves these vulnerabilities. Asset owners and operators should contact Siemens customer support to acquire the update.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan