Siemens RuggedCom ROX-based Devices Certificate Verification Vulnerability (Update A)
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-0092US | medium5.8 | — | ||
lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-i… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-14-135-03A JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-135-03A - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationROX 1
Siemens has developed firmware update V2.6.0 for ROX 2 and V1.16.1 for ROX 1, which fixes the vulnerability (http://www.siemens.com/automation/support-request)
http://www.siemens.com/automation/support-request - MitigationROX 2
Siemens has developed firmware update V2.6.0 for ROX 2 and V1.16.1 for ROX 1, which fixes the vulnerability (http://www.siemens.com/automation/support-request)
http://www.siemens.com/automation/support-request
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan