SSA-459643

csafDEsiemens_psirt

SSA-459643: Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0

view advisory published 2022-09-13

RUGGEDCOM ROS-based devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP connections. The web server recovers by itself once the attack ends. Siemens has released updates for the affected products and recommends to update to the latest versions.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-39158US——
A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGE…
02

references

External citations — patches, advisories, analysis.

03

remediations (64)

  • No fix availableRUGGEDCOM RMC8388NC V5.X

    Currently no fix is available

  • No fix availableRUGGEDCOM RS416NC v2

    Currently no fix is available

  • No fix availableRUGGEDCOM RS416PNC v2

    Currently no fix is available

  • No fix availableRUGGEDCOM RS900GNC(32M) V5.X

    Currently no fix is available

  • No fix availableRUGGEDCOM RS900NC(32M) V5.X

    Currently no fix is available

  • No fix availableRUGGEDCOM RSG2100NC(32M) V5.X

    Currently no fix is available

  • No fix availableRUGGEDCOM RSG2288NC V5.X

    Currently no fix is available

  • No fix availableRUGGEDCOM RSG2300NC V5.X

    Currently no fix is available

  • No fix availableRUGGEDCOM RSG2300PNC V5.X

    Currently no fix is available

  • No fix availableRUGGEDCOM RSG2488NC V5.X

    Currently no fix is available

  • No fix availableRUGGEDCOM RSG920PNC V5.X

    Currently no fix is available

  • No fix availableRUGGEDCOM RSL910NC

    Currently no fix is available

  • FixedRUGGEDCOM RMC8388 V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RS416Pv2

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RS416v2

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RS900 (32M) V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RS900G (32M) V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RSG2100 (32M) V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RSG2288 V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RSG2300 V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RSG2300P V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RSG2488 V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RSG907R

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RSG908C

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RSG909R

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RSG910C

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RSG920P V5.X

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RSL910

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RST2228

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RST2228P

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RST916C

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • FixedRUGGEDCOM RST916P

    Update to V5.6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806156/
  • WorkaroundRUGGEDCOM RMC8388 V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RMC8388NC V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS416NC v2

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS416PNC v2

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS416Pv2

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS416v2

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS900 (32M) V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS900G (32M) V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS900GNC(32M) V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RS900NC(32M) V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2100 (32M) V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2100NC(32M) V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2288 V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2288NC V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2300 V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2300NC V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2300P V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2300PNC V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2488 V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG2488NC V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG907R

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG908C

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG909R

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG910C

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG920P V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSG920PNC V5.X

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSL910

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RSL910NC

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RST2228

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RST2228P

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RST916C

    Deactivate the webserver if not required, and if deactivation is supported by the product

  • WorkaroundRUGGEDCOM RST916P

    Deactivate the webserver if not required, and if deactivation is supported by the product

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan