SSA-406691: Buffer Vulnerabilities in DHCP function of RUGGEDCOM ROX products
A vulnerability in the RUGGEDCOM ROX devices' third party component, ISC DHCP, could allow an attacker to cause a buffer overrun due to a bug when reading a stored DHCP lease containing certain option information, eventually leading to a denial-of-service condition, or cause a remote-code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-25217US | low3.3 | — | ||
In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond… | ||||
references
External citations — patches, advisories, analysis.
remediations (20)
- FixedRUGGEDCOM ROX MX5000
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1400
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1500
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1501
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1510
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1511
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1512
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1524
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1536
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX5000
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - WorkaroundRUGGEDCOM ROX MX5000
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1400
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1500
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1501
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1510
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1511
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1512
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1524
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1536
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX5000
Disable the DHCP client if not needed for operations
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan