SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products
A vulnerability in the RUGGEDCOM ROX devices' third party component, NSS, could allow an attacker to remotely execute code or cause a denial-of-service condition due to the way it verifies security certificates. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-43527US | critical9.8 | — | ||
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS f… | ||||
references
External citations — patches, advisories, analysis.
- SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products - CSAF Versionself
- SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products - PDF Versionself
- SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products - TXT Versionself
remediations (20)
- MitigationRUGGEDCOM ROX MX5000
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1400
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1500
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1501
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1510
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1511
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1512
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1524
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX1536
Reconfigure IPsec connections to use a pre-shared key (PSK).
- MitigationRUGGEDCOM ROX RX5000
Reconfigure IPsec connections to use a pre-shared key (PSK).
- FixedRUGGEDCOM ROX MX5000
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1400
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1500
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1501
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1510
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1511
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1512
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1524
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX1536
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - FixedRUGGEDCOM ROX RX5000
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan