Siemens ROS Improper Input Validation (Update A)
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-2590US | medium5.0OT elevated | — | ||
The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-14-087-01A JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-087-01A - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationROS
Siemens/RuggedCom provide firmware updates ROS v3.11.5, ROS v3.12.4, and ROS v4.1.0
- MitigationROS v3.11 (for product RS950G)
Siemens/RuggedCom provide firmware updates ROS v3.11.5, ROS v3.12.4, and ROS v4.1.0
- MitigationROS v3.12
Siemens/RuggedCom provide firmware updates ROS v3.11.5, ROS v3.12.4, and ROS v4.1.0
- MitigationROS v4.0 (for product RSG2488)
Siemens/RuggedCom provide firmware updates ROS v3.11.5, ROS v3.12.4, and ROS v4.1.0
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan