Siemens RUGGEDCOM Devices
The SSH server on RUGGEDCOM ROS devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37209US | medium4.0OT elevated | — | ||
A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All v… | ||||
references
External citations — patches, advisories, analysis.
- SSA-764417: Weak Encryption Vulnerability in RUGGEDCOM ROS Devices - CSAF Versionself
- SSA-764417: Weak Encryption Vulnerability in RUGGEDCOM ROS Devices - HTML Versionself
- ICS Advisory ICSA-22-069-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-069-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (148)
- MitigationRUGGEDCOM M2100
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM M2200
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM M969
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RMC30
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RMC8388 V4.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RMC8388 V5.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RP110
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS1600
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS1600F
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS1600T
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS400
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS401
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS416
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS416P
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS416Pv2 V4.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS416Pv2 V5.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS416v2 V4.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS416v2 V5.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS8000
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS8000A
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS8000H
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS8000T
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900 (32M) V4.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900 (32M) V5.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900G
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900G (32M) V4.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900G (32M) V5.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900GP
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900L
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900M-GETS-C01
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900M-GETS-XX
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900M-STND-C01
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900M-STND-XX
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS900W
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS910
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS910L
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS910W
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS920L
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS920W
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS930L
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS930W
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS940G
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RS969
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2100
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2100 (32M) V4.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2100 (32M) V5.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2100P
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2100P (32M) V4.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2100P (32M) V5.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2200
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2288 V4.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2288 V5.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2300 V4.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2300 V5.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2300P V4.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2300P V5.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2488 V4.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG2488 V5.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG907R
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG908C
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG909R
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG910C
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG920P V4.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSG920P V5.X
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RSL910
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RST2228
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RST2228P
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RST916C
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM RST916P
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM i800
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM i801
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM i802
Add only trusted SSH client public keys to ROS and allow access to those clients only
- MitigationRUGGEDCOM i803
Add only trusted SSH client public keys to ROS and allow access to those clients only
- FixedRUGGEDCOM M2100
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM M2200
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM M969
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RMC30
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RMC8388 V4.X
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RMC8388 V5.X
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RP110
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS1600
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS1600F
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS1600T
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS400
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS401
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS416
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS416P
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS416Pv2 V4.X
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS416Pv2 V5.X
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RS416v2 V4.X
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS416v2 V5.X
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RS8000
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS8000A
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS8000H
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS8000T
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS900
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS900 (32M) V4.X
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS900 (32M) V5.X
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RS900G
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS900G (32M) V4.X
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS900G (32M) V5.X
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RS900GP
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS900L
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS900M-GETS-C01
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS900M-GETS-XX
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS900M-STND-C01
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS900M-STND-XX
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS900W
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS910
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS910L
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS910W
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS920L
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS920W
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS930L
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS930W
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS940G
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RS969
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RSG2100
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RSG2100 (32M) V4.X
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RSG2100 (32M) V5.X
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RSG2100P
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RSG2100P (32M) V4.X
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RSG2100P (32M) V5.X
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RSG2200
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RSG2288 V4.X
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RSG2288 V5.X
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RSG2300 V4.X
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RSG2300 V5.X
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RSG2300P V4.X
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RSG2300P V5.X
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RSG2488 V4.X
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RSG2488 V5.X
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RSG907R
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RSG908C
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RSG909R
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RSG910C
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RSG920P V4.X
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM RSG920P V5.X
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RSL910
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RST2228
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RST2228P
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RST916C
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM RST916P
Update to V5.7.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814608/ - FixedRUGGEDCOM i800
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM i801
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM i802
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/ - FixedRUGGEDCOM i803
Update to V4.3.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816735/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan